INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.31' (ECDSA) to the list of known hosts. 2018/04/19 11:36:27 fuzzer started 2018/04/19 11:36:27 dialing manager at 10.128.0.26:42695 2018/04/19 11:36:34 kcov=true, comps=false 2018/04/19 11:36:36 executing program 0: 2018/04/19 11:36:36 executing program 1: 2018/04/19 11:36:36 executing program 7: mkdir(&(0x7f000000e000)='./control\x00', 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00'}) r0 = open(&(0x7f0000021000)='./control\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000040)='./control\x00', 0xc0b5, 0x0) faccessat(r0, &(0x7f000003fff6)='./control\x00', 0x0, 0x0) 2018/04/19 11:36:36 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000bc0)=[{&(0x7f0000000140)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000b80)='o', 0x1}], 0x1, &(0x7f0000000280)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x2}}], 0x30}], 0x1, 0x0) 2018/04/19 11:36:36 executing program 3: r0 = socket$inet(0x2, 0x20000000000002, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00009b9000)=0x1000000, 0x4) 2018/04/19 11:36:36 executing program 4: syz_emit_ethernet(0x2a, &(0x7f0000aeb000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14}, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, @icmp=@address_reply={0x12}}}}}, &(0x7f0000aebfe8)) 2018/04/19 11:36:36 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet(r0, &(0x7f0000ac0fbb)="c4", 0x1, 0x0, &(0x7f00006e2000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000200), 0x4) recvmsg(r0, &(0x7f0000001400)={&(0x7f0000000140)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f00000013c0)}, 0x0) 2018/04/19 11:36:36 executing program 6: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x145040, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000333f88)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x50}, 0x1}, 0x0) syzkaller login: [ 44.188426] ip (3758) used greatest stack depth: 54672 bytes left [ 44.515183] ip (3788) used greatest stack depth: 54312 bytes left [ 45.562424] ip (3893) used greatest stack depth: 54200 bytes left [ 45.715790] ip (3905) used greatest stack depth: 53960 bytes left [ 46.054529] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.061015] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.087544] device bridge_slave_0 entered promiscuous mode [ 46.096842] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.103305] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.111296] device bridge_slave_0 entered promiscuous mode [ 46.129086] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.135566] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.157750] device bridge_slave_0 entered promiscuous mode [ 46.177169] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.183618] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.195349] device bridge_slave_0 entered promiscuous mode [ 46.226512] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.233090] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.260008] device bridge_slave_0 entered promiscuous mode [ 46.285850] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.292316] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.327121] device bridge_slave_1 entered promiscuous mode [ 46.333803] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.340271] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.352935] device bridge_slave_1 entered promiscuous mode [ 46.368674] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.375120] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.403209] device bridge_slave_0 entered promiscuous mode [ 46.423558] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.430081] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.443691] device bridge_slave_0 entered promiscuous mode [ 46.451980] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.458438] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.476357] device bridge_slave_1 entered promiscuous mode [ 46.483420] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.489916] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.508961] device bridge_slave_0 entered promiscuous mode [ 46.529289] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.535758] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.552336] device bridge_slave_1 entered promiscuous mode [ 46.569265] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.577481] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.583941] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.594953] device bridge_slave_1 entered promiscuous mode [ 46.603787] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.615728] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.622195] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.649201] device bridge_slave_1 entered promiscuous mode [ 46.664297] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.671707] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.678296] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.708934] device bridge_slave_1 entered promiscuous mode [ 46.728753] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.739806] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.746273] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.778381] device bridge_slave_1 entered promiscuous mode [ 46.797353] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.807601] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.814918] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.823192] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.885382] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.904446] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.911920] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.986745] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.000644] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.038147] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.126408] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.200007] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.774408] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.790194] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.915104] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.930192] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.974371] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.987983] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.009617] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.053432] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.126683] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.138771] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.152988] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.214103] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.222445] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.234931] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.297175] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.427642] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.979793] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.090610] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.140940] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.157341] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.184298] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.220366] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.270129] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.288298] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.309975] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.343588] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.358342] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.412666] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.421715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.438351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.467208] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.480406] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.487794] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.524238] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.537396] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.549544] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.565501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.603898] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.615180] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.622381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.645805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.680246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.702890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.725125] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.738388] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.745450] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.753888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.764623] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.777745] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.785856] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.793812] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.800933] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.846163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.878567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.910692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.926570] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.934940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.942976] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.951074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.959711] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.970872] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.980308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.992650] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.011446] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.019514] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.029794] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.051823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.094748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.119712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.148019] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.157622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.167683] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.175398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.185916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.203879] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.215176] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.226156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.253791] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.268280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.291768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.089505] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.096012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.102927] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.109402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.185989] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.192879] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.223119] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.229606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.236441] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.242897] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.289979] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.296912] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.303411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.310299] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.316759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.356584] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.370570] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.377103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.383951] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.390428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.436300] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.450651] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.457129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.463954] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.470405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.512692] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.526447] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.532910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.539772] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.546211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.599290] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.614850] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.621315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.628192] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.634644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.686221] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.705308] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.711778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.718635] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.725117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.794956] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.216254] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.225696] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.256296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.271652] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.286672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.300695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.309760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.475649] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.691186] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.752374] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.835982] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.930838] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.951437] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.047760] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.167277] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.236150] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.242405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.253664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.470485] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.476742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.488891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.539011] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.545832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.555525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.686254] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.692882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.705337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.726648] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.740635] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.753345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.761663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.786012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.814016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.925891] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.932164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.946942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.028760] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.035137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.048784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/19 11:37:03 executing program 3: pipe2(&(0x7f0000c5b000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000400)={0x0, 0xfffffffffffffffa}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000480)={r1}, 0x8) io_setup(0x9, &(0x7f0000000040)=0x0) sendmsg$alg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)="e97ae2c0ae6d11dcb1a25e4ff95b3ee819567a75f91f2cfde4171a30e85d17f19869892955b9b866c7c181", 0x2b}, {&(0x7f0000000140)="aa910c3b383eb9831f4ff6e1329ed209d13b0e34981498f3b1287bbc4ed8a24fd66741a182f8191bc218a9d2b7de90f196d05e16a5e383a45f3d54cb4b5e", 0x3e}, {&(0x7f0000000180)="d8e7040d2f83cfa9b3789ef7d65aed67968f72e92d8419b0e3b8637d559d4e78f70f", 0x22}, {&(0x7f00000001c0)="b527bb49944d756a5b0bbe54a7fd70ab3cbe275c5074d1b7810e07b52405cdd3766e862f623309df4fc2d0c5d6c632f758186c19686b551343843ffc21f44724316aa39887f5b8ce5c35b4828b0d56c6a3e67f25e9d3446eaa93f5d87f9a2556e78d061ed9e0a6a2b4baab94e6d2c715073afac0e3f5969e54b65e00501e705dd3773feb58c6d520f19f36437149713ee7e45fe9e8ccdf18664803f1eb3aad77ad63a5c161842b8e5ba007ae0b", 0xad}, {&(0x7f0000000280)="b1a9a5d333c31f527f18a3e89bdd34e57852b71072232f78823a72fdf774ba3255d38ef3c95962e463e65a308d57beeb9904308fb238b7c847c6cd79508a3f63fc686c299628f3c8ad100efc441cf6562e409bf0aa69254d19c8ad62a39553217cc0b375c78ea2943268fe8d13b7ced39388c10591b502e2bd9029d1075c1b18542c442cae6401008915cd6242c802428b82c98a9522416e793415f36c1fa9d9873bfbbb29e4d1a0cf429b3799cbd142ff0153682fe8ede1a4f5ea276c", 0xbd}], 0x5, 0x0, 0x0, 0x8000}, 0x0) write(r0, &(0x7f0000000880)='(', 0x1) io_submit(r2, 0x1, &(0x7f0000b52fd8)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000080)="060000008000", 0x6}]) accept$inet(r0, 0x0, &(0x7f0000000000)) 2018/04/19 11:37:03 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x400, 0x0) r1 = inotify_init1(0x0) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @loopback}, &(0x7f00000000c0)=0xc) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, 0x0}) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000100), &(0x7f0000000140)=0x4) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x1000000000b) mremap(&(0x7f0000001000/0x1000)=nil, 0x7ffffffff000, 0x1000, 0x0, &(0x7f0000000000/0x1000)=nil) ptrace(0x11, r2) exit_group(0x2ecc4c09) 2018/04/19 11:37:03 executing program 3: setrlimit(0x8, &(0x7f0000000000)) mlock2(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0) setrlimit(0xe, &(0x7f0000000040)={0x7, 0x401}) r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x4, 0x44000) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f00000000c0)="fff05b472a6b9eb9e813c94e8205091d5f5b12657e8400e11ae0896b59365cd489d0498713f55646fc7d16428ea4495754222e86496a9f7f89c93c0c23e2967b9b3b21f048e61fd5fb4ce218ce802a2bee42d88ea2d3e5e29cf16bfd380bd6f5a475d9ce37e038754c11f9ef24e415e478770b6564cf0acd2e1c314caaef612848d8fceedf2702f9d6e30235f8d23aec700f9c7a6d4e85bec316838deb7cde568eaef7444f76593bfbdb01efde973b7c7ebd29afb9a3baa463b2fca04b723f0505bba2af906c0ec05dedb6a4da6b3137554623d7240450f265333b7174c14c1a9cf919426cfad3b5a4e87517b7fc") 2018/04/19 11:37:03 executing program 1: writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)="8e6a0aacd461c202d03317a4f9a1d8ed2c12", 0x12}], 0x1) mknod$loop(&(0x7f0000dceff8)='./file0\x00', 0x0, 0xffffffffffffffff) syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000100)='./file0\x00', 0x6, 0x1, &(0x7f0000000180)=[{&(0x7f0000000140)="fb4d96a4d9674453765dbda72e3aa48e50699c7ae8dc1f4b13964073", 0x1c, 0x100}], 0x40, &(0x7f00000001c0)={[{@ignore_local_fs='ignore_local_fs', 0x2c}, {@nodiscard='nodiscard', 0x2c}, {@nobarrier='nobarrier', 0x2c}, {@lockproto_nolock='lockproto=lock_nolock', 0x2c}, {@meta='meta', 0x2c}]}) mount(&(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='nfs\x00', 0x0, &(0x7f0000000040)) 2018/04/19 11:37:03 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000bc0)=[{&(0x7f0000000140)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000b80)='o', 0x1}], 0x1, &(0x7f0000000280)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x2}}], 0x30}], 0x1, 0x0) 2018/04/19 11:37:03 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0xff, 0x400000) getsockname$unix(r1, &(0x7f0000000140), &(0x7f00000001c0)=0x6e) connect$inet6(r0, &(0x7f0000233fe4)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x2}, 0x1c) poll(&(0x7f0000000080)=[{r0, 0x7ffff}], 0x1, 0x5) [ 68.946420] ================================================================== [ 68.953841] BUG: KMSAN: uninit-value in move_addr_to_user+0x32e/0x530 [ 68.960417] CPU: 0 PID: 5790 Comm: syz-executor5 Not tainted 4.16.0+ #84 [ 68.967234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 68.976563] Call Trace: [ 68.979134] dump_stack+0x185/0x1d0 [ 68.982740] ? kmsan_internal_check_memory+0x155/0x1e0 [ 68.988009] kmsan_report+0x142/0x240 [ 68.991818] kmsan_internal_check_memory+0x174/0x1e0 [ 68.996920] kmsan_copy_to_user+0x69/0x160 [ 69.001141] move_addr_to_user+0x32e/0x530 [ 69.005360] ___sys_recvmsg+0x4e2/0x810 [ 69.009319] ? __fget_light+0x56/0x710 [ 69.013187] ? __fdget+0x4e/0x60 [ 69.016531] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 69.021873] ? __fget_light+0x6b9/0x710 [ 69.025832] SYSC_recvmsg+0x298/0x3c0 [ 69.029614] SyS_recvmsg+0x54/0x80 [ 69.033132] do_syscall_64+0x309/0x430 [ 69.037040] ? ___sys_recvmsg+0x810/0x810 [ 69.041182] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 69.046351] RIP: 0033:0x455329 [ 69.049516] RSP: 002b:00007f2f74291c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 69.057200] RAX: ffffffffffffffda RBX: 00007f2f742926d4 RCX: 0000000000455329 [ 69.064457] RDX: 0000000000000000 RSI: 0000000020001400 RDI: 0000000000000013 [ 69.071704] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 69.078951] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 69.086196] R13: 0000000000000496 R14: 00000000006f9eb0 R15: 0000000000000000 [ 69.093445] [ 69.095051] Local variable description: ----addr@___sys_recvmsg [ 69.101093] Variable was created at: [ 69.104787] ___sys_recvmsg+0xd5/0x810 [ 69.108659] SYSC_recvmsg+0x298/0x3c0 [ 69.112430] [ 69.114042] Bytes 8-15 of 16 are uninitialized [ 69.118602] ================================================================== [ 69.125934] Disabling lock debugging due to kernel taint [ 69.131356] Kernel panic - not syncing: panic_on_warn set ... [ 69.131356] [ 69.138700] CPU: 0 PID: 5790 Comm: syz-executor5 Tainted: G B 4.16.0+ #84 [ 69.146820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.156165] Call Trace: [ 69.158734] dump_stack+0x185/0x1d0 [ 69.162342] panic+0x39d/0x940 [ 69.165522] ? kmsan_internal_check_memory+0x155/0x1e0 [ 69.170774] kmsan_report+0x238/0x240 [ 69.174557] kmsan_internal_check_memory+0x174/0x1e0 [ 69.179638] kmsan_copy_to_user+0x69/0x160 [ 69.183863] move_addr_to_user+0x32e/0x530 [ 69.188103] ___sys_recvmsg+0x4e2/0x810 [ 69.192064] ? __fget_light+0x56/0x710 [ 69.195929] ? __fdget+0x4e/0x60 [ 69.199273] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 69.204613] ? __fget_light+0x6b9/0x710 [ 69.208571] SYSC_recvmsg+0x298/0x3c0 [ 69.212352] SyS_recvmsg+0x54/0x80 [ 69.215872] do_syscall_64+0x309/0x430 [ 69.219748] ? ___sys_recvmsg+0x810/0x810 [ 69.223875] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 69.229046] RIP: 0033:0x455329 [ 69.232221] RSP: 002b:00007f2f74291c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 69.239915] RAX: ffffffffffffffda RBX: 00007f2f742926d4 RCX: 0000000000455329 [ 69.247164] RDX: 0000000000000000 RSI: 0000000020001400 RDI: 0000000000000013 [ 69.254410] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 69.261659] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 69.268906] R13: 0000000000000496 R14: 00000000006f9eb0 R15: 0000000000000000 [ 69.276731] Dumping ftrace buffer: [ 69.280253] (ftrace buffer empty) [ 69.283946] Kernel Offset: disabled [ 69.287548] Rebooting in 86400 seconds..