INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.18' (ECDSA) to the list of known hosts. 2018/04/14 18:24:53 fuzzer started 2018/04/14 18:24:54 dialing manager at 10.128.0.26:36243 2018/04/14 18:25:00 kcov=true, comps=false 2018/04/14 18:25:03 executing program 0: 2018/04/14 18:25:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f00000002c0)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x3}, 0x1c) 2018/04/14 18:25:03 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x81) syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x0) close(r0) 2018/04/14 18:25:03 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) 2018/04/14 18:25:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'bridge0\x00'}) 2018/04/14 18:25:03 executing program 3: 2018/04/14 18:25:03 executing program 5: 2018/04/14 18:25:03 executing program 6: syzkaller login: [ 41.437252] ip (3763) used greatest stack depth: 54672 bytes left [ 42.670737] ip (3883) used greatest stack depth: 54544 bytes left [ 42.820123] ip (3898) used greatest stack depth: 53976 bytes left [ 43.296312] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.302839] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.338069] device bridge_slave_0 entered promiscuous mode [ 43.366808] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.373306] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.388933] device bridge_slave_0 entered promiscuous mode [ 43.423615] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.430160] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.454506] device bridge_slave_0 entered promiscuous mode [ 43.470476] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.476972] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.493898] device bridge_slave_0 entered promiscuous mode [ 43.523517] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.530082] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.547067] device bridge_slave_0 entered promiscuous mode [ 43.554302] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.560757] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.579956] device bridge_slave_0 entered promiscuous mode [ 43.600415] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.606883] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.617264] device bridge_slave_0 entered promiscuous mode [ 43.624974] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.631457] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.641527] device bridge_slave_1 entered promiscuous mode [ 43.655015] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.661519] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.681093] device bridge_slave_0 entered promiscuous mode [ 43.699249] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.705751] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.731053] device bridge_slave_1 entered promiscuous mode [ 43.742556] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.749206] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.767378] device bridge_slave_1 entered promiscuous mode [ 43.775992] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.782495] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.800193] device bridge_slave_1 entered promiscuous mode [ 43.810437] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.816917] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.836575] device bridge_slave_1 entered promiscuous mode [ 43.843187] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.849646] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.857828] device bridge_slave_1 entered promiscuous mode [ 43.867749] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 43.877958] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.884513] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.927471] device bridge_slave_1 entered promiscuous mode [ 43.936246] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 43.943665] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.950166] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.986515] device bridge_slave_1 entered promiscuous mode [ 44.003272] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.015483] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.026113] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.038180] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.070428] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.125113] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.156537] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.180800] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.198320] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.214648] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.259393] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.303899] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.350783] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.424968] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.955793] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.096236] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.166989] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.190928] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.198341] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.208110] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.311528] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.354323] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.375180] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.384414] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.396299] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.409196] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.458977] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.551753] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.626366] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.688732] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.208779] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.303077] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.368423] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.389406] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.411448] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 46.427538] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.514212] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 46.577663] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.602477] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 46.609718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.621531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.646496] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 46.654345] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.661974] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 46.670162] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 46.684770] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.718562] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 46.729244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.745895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.805309] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 46.835280] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 46.842808] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.854762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.895808] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 46.906877] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 46.919549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.928804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.945538] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.960216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.979845] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 46.989130] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 46.997124] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.010188] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.018167] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.028612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.053616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.077211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.105139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.129669] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.154793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.170937] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.183512] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.197716] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.205394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.220940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.245636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.272771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.299121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.322799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.338532] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.345834] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.354722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.368394] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.384339] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.393572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.418726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.436648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.454822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.472243] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.479478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.500137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.560627] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.568353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.585495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.344888] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.351370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.358796] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.365276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.407877] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 49.414416] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.457682] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.464186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.471099] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.477570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.520883] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 49.533370] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.539828] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.546697] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.553177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.580472] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 49.609529] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.616021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.622965] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.629429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.674940] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 49.703479] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.709970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.716841] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.723305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.774006] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 49.785134] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.791611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.798460] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.804931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.867091] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 49.881514] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.887992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.894842] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.901291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.953488] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.135011] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.141559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.148446] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.154952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.190448] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.464696] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.480883] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.516149] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.550762] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.582738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.604230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.611735] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.736906] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 58.889908] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 58.988706] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.043813] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.239107] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.252528] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.344095] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.514968] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 59.521906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.540650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.646320] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.745384] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 59.751628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.772302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.805770] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 59.812777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.840793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.882644] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 59.888911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.906940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.094252] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.100622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.110932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.138588] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.148746] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.155203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.171676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.199338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.218235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.469361] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.475634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.485646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/14 18:25:29 executing program 1: 2018/04/14 18:25:29 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001840)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7be", 0x10) 2018/04/14 18:25:29 executing program 6: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000387000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) close(r0) 2018/04/14 18:25:29 executing program 5: r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x2000000000006) r1 = memfd_create(&(0x7f0000f9dffe)="c403", 0x0) mmap(&(0x7f0000000000/0xaa7000)=nil, 0xaa7000, 0x0, 0x12, r1, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x127d, &(0x7f00000000c0)) [ 65.845672] ================================================================== [ 65.853094] BUG: KMSAN: uninit-value in crypto_aes_expand_key+0x6d1/0x1dc0 [ 65.860116] CPU: 1 PID: 5735 Comm: syz-executor1 Not tainted 4.16.0+ #83 [ 65.866960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 65.876321] Call Trace: [ 65.878923] dump_stack+0x185/0x1d0 [ 65.882564] ? crypto_aes_expand_key+0x6d1/0x1dc0 [ 65.887410] kmsan_report+0x142/0x240 [ 65.891224] __msan_warning_32+0x6c/0xb0 [ 65.895292] crypto_aes_expand_key+0x6d1/0x1dc0 [ 65.899980] crypto_aes_set_key+0x9d/0x180 [ 65.904230] ? crypto_aes_expand_key+0x1dc0/0x1dc0 [ 65.909173] setkey+0x50f/0x5a0 [ 65.912474] crypto_xcbc_digest_setkey+0x4b7/0x570 [ 65.917412] ? crypto_init_cipher_ops+0x2c0/0x2c0 [ 65.922268] ? crypto_aes_decrypt_x86+0xa0/0xa0 [ 65.926944] ? crypto_aes_decrypt_x86+0xa0/0xa0 [ 65.931615] ? crypto_aes_decrypt_x86+0xa0/0xa0 [ 65.936288] ? crypto_init_cipher_ops+0x2c0/0x2c0 [ 65.941131] ? shash_async_setkey+0x2c8/0x4c0 2018/04/14 18:25:29 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001840)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7be", 0x10) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000002f80)="af92b02946cc7574aa8e5ab7acd3d6614713177f7e6614cd185033598267889107", 0x21}], 0x1}, 0x0) [ 65.945630] ? crypto_xcbc_digest_final+0x530/0x530 [ 65.950650] shash_async_setkey+0x337/0x4c0 [ 65.954973] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 65.960342] ? trace_kmalloc+0xb6/0x2b0 [ 65.964324] ? shash_async_digest+0x1b0/0x1b0 [ 65.968829] crypto_ahash_setkey+0x31a/0x470 [ 65.973245] hash_setkey+0x8b/0xa0 [ 65.976794] alg_setsockopt+0x6c5/0x740 [ 65.980775] ? hash_release+0x50/0x50 [ 65.984582] ? alg_accept+0xd0/0xd0 [ 65.988216] SYSC_setsockopt+0x4b8/0x570 [ 65.992287] SyS_setsockopt+0x76/0xa0 [ 65.996088] do_syscall_64+0x309/0x430 [ 65.999981] ? SYSC_recv+0xe0/0xe0 [ 66.003529] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 66.008714] RIP: 0033:0x455319 [ 66.011901] RSP: 002b:00007fce65f17c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 66.019613] RAX: ffffffffffffffda RBX: 00007fce65f186d4 RCX: 0000000000455319 [ 66.026889] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000013 [ 66.034160] RBP: 000000000072bea0 R08: 0000000000000010 R09: 0000000000000000 [ 66.041431] R10: 0000000020001f3a R11: 0000000000000246 R12: 00000000ffffffff [ 66.048709] R13: 0000000000000510 R14: 00000000006faa20 R15: 0000000000000000 [ 66.055984] [ 66.057611] Local variable description: ----vla@crypto_xcbc_digest_setkey [ 66.064528] Variable was created at: [ 66.068260] crypto_xcbc_digest_setkey+0x12e/0x570 [ 66.073197] shash_async_setkey+0x337/0x4c0 [ 66.077517] ================================================================== [ 66.084874] Disabling lock debugging due to kernel taint [ 66.090317] Kernel panic - not syncing: panic_on_warn set ... 2018/04/14 18:25:30 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x829f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff01}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000080)=[{r1}], 0x1, &(0x7f0000000180)={0x0, r2+10000000}, &(0x7f00000001c0), 0x8) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$TIOCGLCKTRMIOS(r3, 0x5412, &(0x7f0000000100)={0xffffffff}) [ 66.090317] [ 66.097689] CPU: 1 PID: 5735 Comm: syz-executor1 Tainted: G B 4.16.0+ #83 [ 66.105830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 66.115183] Call Trace: [ 66.117782] dump_stack+0x185/0x1d0 [ 66.121421] panic+0x39d/0x940 [ 66.124647] ? crypto_aes_expand_key+0x6d1/0x1dc0 [ 66.129495] kmsan_report+0x238/0x240 [ 66.133302] __msan_warning_32+0x6c/0xb0 [ 66.137371] crypto_aes_expand_key+0x6d1/0x1dc0 [ 66.142058] crypto_aes_set_key+0x9d/0x180 2018/04/14 18:25:30 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001840)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7be", 0x10) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000002f80)="af92b02946cc7574aa8e5ab7acd3d6614713177f7e6614cd185033598267889107", 0x21}], 0x1}, 0x0) [ 66.146309] ? crypto_aes_expand_key+0x1dc0/0x1dc0 [ 66.151242] setkey+0x50f/0x5a0 [ 66.154536] crypto_xcbc_digest_setkey+0x4b7/0x570 [ 66.159475] ? crypto_init_cipher_ops+0x2c0/0x2c0 [ 66.164326] ? crypto_aes_decrypt_x86+0xa0/0xa0 [ 66.169008] ? crypto_aes_decrypt_x86+0xa0/0xa0 [ 66.173688] ? crypto_aes_decrypt_x86+0xa0/0xa0 [ 66.178367] ? crypto_init_cipher_ops+0x2c0/0x2c0 [ 66.183214] ? shash_async_setkey+0x2c8/0x4c0 [ 66.187719] ? crypto_xcbc_digest_final+0x530/0x530 [ 66.192742] shash_async_setkey+0x337/0x4c0 [ 66.197072] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 66.202446] ? trace_kmalloc+0xb6/0x2b0 [ 66.206433] ? shash_async_digest+0x1b0/0x1b0 [ 66.210951] crypto_ahash_setkey+0x31a/0x470 [ 66.215377] hash_setkey+0x8b/0xa0 [ 66.218933] alg_setsockopt+0x6c5/0x740 [ 66.222922] ? hash_release+0x50/0x50 [ 66.226736] ? alg_accept+0xd0/0xd0 [ 66.230372] SYSC_setsockopt+0x4b8/0x570 [ 66.234455] SyS_setsockopt+0x76/0xa0 [ 66.238263] do_syscall_64+0x309/0x430 [ 66.242166] ? SYSC_recv+0xe0/0xe0 [ 66.245719] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 66.251009] RIP: 0033:0x455319 [ 66.254204] RSP: 002b:00007fce65f17c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 66.261914] RAX: ffffffffffffffda RBX: 00007fce65f186d4 RCX: 0000000000455319 [ 66.269185] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000013 [ 66.276461] RBP: 000000000072bea0 R08: 0000000000000010 R09: 0000000000000000 [ 66.283737] R10: 0000000020001f3a R11: 0000000000000246 R12: 00000000ffffffff [ 66.291015] R13: 0000000000000510 R14: 00000000006faa20 R15: 0000000000000000 [ 66.298762] Dumping ftrace buffer: [ 66.302292] (ftrace buffer empty) [ 66.305978] Kernel Offset: disabled [ 66.309599] Rebooting in 86400 seconds..