INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.0' (ECDSA) to the list of known hosts. 2018/04/17 09:42:52 fuzzer started 2018/04/17 09:42:52 dialing manager at 10.128.0.26:43021 2018/04/17 09:42:58 kcov=true, comps=false 2018/04/17 09:43:01 executing program 0: 2018/04/17 09:43:01 executing program 2: 2018/04/17 09:43:01 executing program 7: 2018/04/17 09:43:01 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2400000024000300000002001af2720c00000ee00300000000003600fffffffffffff5fc", 0x24}], 0x1}, 0x0) 2018/04/17 09:43:01 executing program 3: syz_emit_ethernet(0x1f, &(0x7f0000000000)={@random="cf393ef02664", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x0, 0x0, @loopback={0x0, 0x1}, @mcast2={0xff, 0x2, [], 0x1}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000775000)) 2018/04/17 09:43:01 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x401, 0x0, 0x0, {0x10}}, 0x14}, 0x1}, 0x0) write(r0, &(0x7f0000424000)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000100)={&(0x7f0000000080)=@ax25, 0x80, &(0x7f00002b3000), 0x0, &(0x7f0000878000)}, 0x0) recvmsg(r0, &(0x7f00000001c0)={&(0x7f00008ba000)=@hci, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000000)=""/62, 0x3e}, 0x0) 2018/04/17 09:43:01 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000289fa8)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ad5664a3239dafb6c5820faeb995298992ea54c7beef9f5d", 0x18) r2 = accept$alg(r0, 0x0, 0x0) io_setup(0x1, &(0x7f0000e4b000)=0x0) sendmsg$alg(r2, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000000)="f9e3a127be1d0953084fab7d2701417e1d4a010731", 0x15}], 0x1, &(0x7f00000000c0)}, 0x0) io_submit(r3, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000100)='N#\x00\x00\x00\x00\x00\x00\t\x00\x00\x00\x00\x00', 0xe}]) 2018/04/17 09:43:01 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={0x0, {0x2}, {0x2, 0x0, @broadcast=0xffffffff}, {0x2, 0x0, @rand_addr}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)='syz_tun\x00'}) syzkaller login: [ 41.706673] ip (3764) used greatest stack depth: 54672 bytes left [ 42.050895] ip (3799) used greatest stack depth: 54312 bytes left [ 43.074781] ip (3896) used greatest stack depth: 54200 bytes left [ 43.352359] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.358860] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.396335] device bridge_slave_0 entered promiscuous mode [ 43.491737] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.498243] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.543017] device bridge_slave_0 entered promiscuous mode [ 43.602956] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.609469] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.650787] device bridge_slave_0 entered promiscuous mode [ 43.669439] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.675963] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.711020] device bridge_slave_1 entered promiscuous mode [ 43.735898] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.742396] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.756700] device bridge_slave_0 entered promiscuous mode [ 43.769741] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.776221] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.787900] device bridge_slave_0 entered promiscuous mode [ 43.795819] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.802320] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.821213] device bridge_slave_1 entered promiscuous mode [ 43.830157] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.836624] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.848617] device bridge_slave_0 entered promiscuous mode [ 43.858612] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.865103] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.898118] device bridge_slave_0 entered promiscuous mode [ 43.909765] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.916230] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.926844] device bridge_slave_0 entered promiscuous mode [ 43.936493] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 43.945558] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.952086] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.985347] device bridge_slave_1 entered promiscuous mode [ 43.995873] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.002354] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.012115] device bridge_slave_1 entered promiscuous mode [ 44.024922] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.035516] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.042094] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.063276] device bridge_slave_1 entered promiscuous mode [ 44.070918] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.077404] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.115203] device bridge_slave_1 entered promiscuous mode [ 44.122138] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.128605] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.154102] device bridge_slave_1 entered promiscuous mode [ 44.162947] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.169409] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.187926] device bridge_slave_1 entered promiscuous mode [ 44.203934] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.212729] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.220878] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.238169] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.270182] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.339810] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.365195] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.406999] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.415014] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.460695] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.511429] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.544104] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.567774] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.673826] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.211235] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.257627] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.411087] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.420867] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.457329] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.471019] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.497242] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.511743] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.584231] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.651160] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.658434] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.671968] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.679938] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.734603] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.742782] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.847151] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.496685] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.563805] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.625905] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.684143] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.708755] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.734810] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.743318] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 46.762848] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 46.774609] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.837758] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.845166] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 46.907414] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 46.916518] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 46.966640] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 46.976065] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.992850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.012488] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.025170] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.043747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.059253] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.066366] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.073489] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.088892] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.100635] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.116257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.143422] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.151386] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.173412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.211296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.238116] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.263860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.281704] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.291201] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.299528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.310902] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.322325] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.337475] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.347130] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.355356] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.362485] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.387999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.415856] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.453170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.483823] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.499593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.507617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.515733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.523484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.531512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.540596] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.548318] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.555620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.564471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.573170] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.587130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.607384] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.624435] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.632703] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.649288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.662741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.698841] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.734163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.760423] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.788264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.039484] ip (4337) used greatest stack depth: 53976 bytes left [ 49.727227] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.733718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.740562] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.747087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.781729] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 49.790554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.809653] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.816141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.823022] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.829514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.841850] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 49.856642] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.863106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.869903] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.876334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.884899] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 49.898813] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.905286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.912156] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.918620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.973252] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 49.981094] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.987558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.994379] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.000829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.035755] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.058797] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.065268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.072156] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.078618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.153393] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.160511] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.166981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.173811] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.180284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.208861] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.228017] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.234514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.241366] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.247800] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.319110] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.848175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.864496] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.897724] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.917781] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.932902] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.941218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.948837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.170015] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.178415] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.280830] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.291998] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.425945] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.442987] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.696819] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.828998] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.937305] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 59.943577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.955867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.997670] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.006240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.017571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.041225] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.060095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.079680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.114771] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.123923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.140211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.232433] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.238694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.249162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.278968] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.289792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.316664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.533698] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.539973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.561648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.787904] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.794407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.806484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/17 09:43:27 executing program 2: r0 = userfaultfd(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0xffffffffffffffff}) epoll_wait(r1, &(0x7f0000ffafdc)=[{}], 0x1, 0x0) 2018/04/17 09:43:27 executing program 7: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000017c0)='/proc/self/net/pfkey\x00', 0x200, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000000)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000040)={0x0, 0x5}, 0xc) ioctl$TCSBRK(r0, 0x5409, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x1023c) r2 = syz_open_procfs(0x0, &(0x7f0000b92000)='smaps\x00') readv(r2, &(0x7f00009a5f80)=[{&(0x7f0000214000)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000759000)='clear_refs\x00') ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001780)) fcntl$getown(0xffffffffffffffff, 0x9) r4 = syz_open_procfs(0x0, &(0x7f0000001340)='oom_score\x00') sendfile(r3, r4, &(0x7f0000929000), 0xff) readv(r2, &(0x7f0000dc8ff8)=[{&(0x7f0000208000)=""/4096, 0x1000}], 0x1d3) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000001240)=ANY=[@ANYBLOB="004a42000144440031933f3a"]) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000001680)) fcntl$getown(0xffffffffffffffff, 0x9) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000200)) gettid() setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000001880)=ANY=[@ANYBLOB="00000000000000000a000000ffff0000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000020000000a00000004000000fe800000000000000000000000c9915e14ce6161b20000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000009c050000fe80"], 0x1) 2018/04/17 09:43:27 executing program 3: mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x55071, 0xffffffffffffffff, 0x0) process_vm_readv(0x0, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/63, 0x3f}], 0x1, &(0x7f0000000600), 0x0, 0x0) socketpair$inet(0x2, 0x6, 0x80, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x1b}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={r1, 0x2c, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, @in6={0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x19}, 0x18be}]}, &(0x7f0000000140)=0x10) 2018/04/17 09:43:28 executing program 4: r0 = socket$inet_sctp(0x2, 0x0, 0x84) sendmmsg$inet_sctp(r0, &(0x7f00000018c0)=[{&(0x7f0000000080)=@in={0x2}, 0x10, &(0x7f00000011c0), 0x0, &(0x7f0000001300)=[@sndrcv={0x30, 0x84, 0x1}, @sndinfo={0x20, 0x84, 0x2}], 0x60}], 0x1, 0x0) 2018/04/17 09:43:28 executing program 2: mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='trustedmime_typemime_type\x00', 0x1) r1 = fcntl$getown(0xffffffffffffff9c, 0x9) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@broadcast, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@rand_addr}}, &(0x7f0000000200)=0xe8) getresgid(&(0x7f0000000380), &(0x7f00000003c0)=0x0, &(0x7f0000000400)) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e22, 0x7, @local={0xfe, 0x80, [], 0xaa}, 0x7fff}}, 0x0, 0xfd5, 0x4, 0x0, 0x83}, &(0x7f0000000580)=0x98) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000005c0)={r4, 0x5, 0x0, 0x4, 0xffffffff, 0x9}, 0x14) sendmsg$unix(r0, &(0x7f0000000480)={&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d6a69587cf2bc5f9ca1f98d5cb807b4b45f72adb9af85d653f30d383bafe5bc344d4d2b2d729bfae934bf4491e2090601d2071c8a30fc0c76f869348436282f14bf8f4077bddb2ea4219814b75d3f8d7c646d0155634fef8589a7d738164b06850bab9eef06a2122a55843574c49fa3b429b5dd497d6bba464", 0x79}, {&(0x7f0000000140)="34237ef6c2619feb4bd3c3a3da302d6f4bc95707dde1bde62b3b5be617f56297c864429c38f564eb73829cc1fb3f43dff5fe06d704b5f960197740bbf8e2aa860bbfa2c767173e505029daf265c85baf90b8def7043e31f1c71617d97a6fd665303f28af02b6d42685cdb7b44ea319d824c20727d25a1980777af149eb14", 0x7e}], 0x2, &(0x7f0000000440)=[@cred={0x20, 0x1, 0x2, r1, r2, r3}], 0x20, 0x80}, 0x4000000) pselect6(0x40, &(0x7f0000d26000), &(0x7f0000d25fc0), &(0x7f0000d25fc0), &(0x7f0000ab6ff0), &(0x7f0000000240)={&(0x7f0000288000), 0x8}) [ 66.444076] ================================================================== [ 66.451505] BUG: KMSAN: uninit-value in gf128mul_init_4k_lle+0x212/0x5c0 [ 66.458358] CPU: 0 PID: 5773 Comm: syz-executor5 Not tainted 4.16.0+ #84 [ 66.465196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 66.474548] Call Trace: [ 66.477144] dump_stack+0x185/0x1d0 [ 66.480777] ? gf128mul_init_4k_lle+0x212/0x5c0 [ 66.485450] kmsan_report+0x142/0x240 [ 66.489257] __msan_warning_32+0x6c/0xb0 [ 66.493411] gf128mul_init_4k_lle+0x212/0x5c0 [ 66.497913] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 66.503278] ? ghash_setkey+0x56/0x280 [ 66.507171] ghash_setkey+0x185/0x280 [ 66.510974] ? ghash_final+0x1f0/0x1f0 [ 66.514851] shash_async_setkey+0x337/0x4c0 [ 66.519153] ? shash_async_digest+0x1b0/0x1b0 [ 66.523628] crypto_ahash_setkey+0x31a/0x470 [ 66.528020] ? skcipher_encrypt_blkcipher+0x222/0x320 [ 66.533210] crypto_gcm_setkey+0xa3c/0xc10 [ 66.537434] ? crypto_gcm_exit_tfm+0xd0/0xd0 [ 66.541818] crypto_aead_setkey+0x373/0x4c0 [ 66.546118] aead_setkey+0xa0/0xc0 [ 66.549635] alg_setsockopt+0x6c5/0x740 [ 66.553595] ? aead_release+0x90/0x90 [ 66.557383] ? alg_accept+0xd0/0xd0 [ 66.560987] SYSC_setsockopt+0x4b8/0x570 [ 66.565040] SyS_setsockopt+0x76/0xa0 [ 66.568826] do_syscall_64+0x309/0x430 [ 66.572785] ? SYSC_recv+0xe0/0xe0 [ 66.576309] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 66.581476] RIP: 0033:0x455329 [ 66.584642] RSP: 002b:00007f0a5e896c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 66.592329] RAX: ffffffffffffffda RBX: 00007f0a5e8976d4 RCX: 0000000000455329 [ 66.599585] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000013 [ 66.606842] RBP: 000000000072bea0 R08: 0000000000000018 R09: 0000000000000000 [ 66.614093] R10: 0000000020000080 R11: 0000000000000246 R12: 00000000ffffffff [ 66.621346] R13: 0000000000000510 R14: 00000000006faa20 R15: 0000000000000000 [ 66.628599] [ 66.630201] Uninit was stored to memory at: [ 66.634505] kmsan_internal_chain_origin+0x12b/0x210 [ 66.639594] kmsan_memcpy_origins+0x11d/0x170 [ 66.644086] __msan_memcpy+0x19f/0x1f0 [ 66.647951] gf128mul_init_4k_lle+0x99/0x5c0 [ 66.652354] ghash_setkey+0x185/0x280 [ 66.656139] shash_async_setkey+0x337/0x4c0 [ 66.660449] crypto_ahash_setkey+0x31a/0x470 [ 66.664844] crypto_gcm_setkey+0xa3c/0xc10 [ 66.669059] crypto_aead_setkey+0x373/0x4c0 [ 66.673367] aead_setkey+0xa0/0xc0 [ 66.676881] alg_setsockopt+0x6c5/0x740 [ 66.680838] SYSC_setsockopt+0x4b8/0x570 [ 66.684882] SyS_setsockopt+0x76/0xa0 [ 66.688666] do_syscall_64+0x309/0x430 [ 66.692537] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 66.697711] Uninit was stored to memory at: [ 66.702022] kmsan_internal_chain_origin+0x12b/0x210 [ 66.707108] __msan_chain_origin+0x69/0xc0 [ 66.711328] __crypto_xor+0x23c/0x16b0 [ 66.715202] crypto_ctr_crypt_inplace+0x29a/0x3a0 [ 66.720031] crypto_ctr_crypt+0x54c/0x7d0 [ 66.724161] skcipher_encrypt_blkcipher+0x222/0x320 [ 66.729154] crypto_gcm_setkey+0x6a3/0xc10 [ 66.733366] crypto_aead_setkey+0x373/0x4c0 [ 66.737667] aead_setkey+0xa0/0xc0 [ 66.741185] alg_setsockopt+0x6c5/0x740 [ 66.745138] SYSC_setsockopt+0x4b8/0x570 [ 66.749178] SyS_setsockopt+0x76/0xa0 [ 66.752952] do_syscall_64+0x309/0x430 [ 66.757220] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 66.762390] Local variable description: ----vla@crypto_ctr_crypt_inplace [ 66.769200] Variable was created at: [ 66.772896] crypto_ctr_crypt_inplace+0x19a/0x3a0 [ 66.777730] crypto_ctr_crypt+0x54c/0x7d0 [ 66.781857] ================================================================== [ 66.789193] Disabling lock debugging due to kernel taint [ 66.794618] Kernel panic - not syncing: panic_on_warn set ... [ 66.794618] [ 66.801968] CPU: 0 PID: 5773 Comm: syz-executor5 Tainted: G B 4.16.0+ #84 [ 66.810087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 66.819427] Call Trace: [ 66.822000] dump_stack+0x185/0x1d0 [ 66.825616] panic+0x39d/0x940 [ 66.828798] ? gf128mul_init_4k_lle+0x212/0x5c0 [ 66.833445] kmsan_report+0x238/0x240 [ 66.837236] __msan_warning_32+0x6c/0xb0 [ 66.841291] gf128mul_init_4k_lle+0x212/0x5c0 [ 66.845780] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 66.851120] ? ghash_setkey+0x56/0x280 [ 66.854984] ghash_setkey+0x185/0x280 [ 66.858765] ? ghash_final+0x1f0/0x1f0 [ 66.862632] shash_async_setkey+0x337/0x4c0 [ 66.866938] ? shash_async_digest+0x1b0/0x1b0 [ 66.871414] crypto_ahash_setkey+0x31a/0x470 [ 66.875801] ? skcipher_encrypt_blkcipher+0x222/0x320 [ 66.880972] crypto_gcm_setkey+0xa3c/0xc10 [ 66.885199] ? crypto_gcm_exit_tfm+0xd0/0xd0 [ 66.889593] crypto_aead_setkey+0x373/0x4c0 [ 66.893898] aead_setkey+0xa0/0xc0 [ 66.897431] alg_setsockopt+0x6c5/0x740 [ 66.901388] ? aead_release+0x90/0x90 [ 66.905167] ? alg_accept+0xd0/0xd0 [ 66.908786] SYSC_setsockopt+0x4b8/0x570 [ 66.912836] SyS_setsockopt+0x76/0xa0 [ 66.916622] do_syscall_64+0x309/0x430 [ 66.920501] ? SYSC_recv+0xe0/0xe0 [ 66.924034] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 66.929210] RIP: 0033:0x455329 [ 66.932387] RSP: 002b:00007f0a5e896c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 66.940082] RAX: ffffffffffffffda RBX: 00007f0a5e8976d4 RCX: 0000000000455329 [ 66.947334] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000013 [ 66.954599] RBP: 000000000072bea0 R08: 0000000000000018 R09: 0000000000000000 [ 66.961848] R10: 0000000020000080 R11: 0000000000000246 R12: 00000000ffffffff [ 66.969113] R13: 0000000000000510 R14: 00000000006faa20 R15: 0000000000000000 [ 66.976806] Dumping ftrace buffer: [ 66.980326] (ftrace buffer empty) [ 66.984012] Kernel Offset: disabled [ 66.987618] Rebooting in 86400 seconds..