INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.16' (ECDSA) to the list of known hosts. 2018/04/13 19:42:23 fuzzer started 2018/04/13 19:42:23 dialing manager at 10.128.0.26:33379 2018/04/13 19:42:29 kcov=true, comps=false 2018/04/13 19:42:32 executing program 0: pselect6(0x13, &(0x7f0000000000)={0x3ffffd}, &(0x7f0000768000), &(0x7f00007fbfc0), &(0x7f0000f22000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f000093f000), 0x8}) 2018/04/13 19:42:32 executing program 2: r0 = memfd_create(&(0x7f0000d0bffe)="7b10", 0x3) fcntl$addseals(r0, 0x409, 0x4) io_setup(0x1003, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="e5", 0x1}]) 2018/04/13 19:42:32 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006580)=[{{&(0x7f0000001c40)=@sco, 0x80, &(0x7f0000002000)=[{&(0x7f0000001f40)=""/26, 0x1a}, {&(0x7f0000001f80)=""/68, 0x44}], 0x2, &(0x7f0000002080)=""/77, 0x4d}}], 0x1, 0x0, &(0x7f00000067c0)) bind$alg(r0, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffcbe, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820faeb995298992ea54c7beef915d56534c90c2", 0x18) sendto$llc(r1, &(0x7f0000000080)="57860e17f91a8bf2b42a183dbec553fdcef96f4253cdceae104f694474abb9f0968e449f30c7ea37954fa2", 0x2b, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) 2018/04/13 19:42:32 executing program 3: mkdir(&(0x7f00003e4000)='./file0\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f000066f000)='./file0\x00', 0x13) mkdir(&(0x7f0000000100)='./file0/control\x00', 0x0) execve(&(0x7f00000000c0)='./file0/control\x00', &(0x7f0000000080), &(0x7f0000000000)) read(r0, &(0x7f0000000080)=""/17, 0xfd6f) 2018/04/13 19:42:32 executing program 4: r0 = socket(0x1f, 0x2000000000000005, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000040)={"69705f7674693000000000000100", &(0x7f0000000080)=ANY=[@ANYBLOB="1435cf8d0a822b989d06eb21c6000000001000000120471e56a898df22a8ebf4455a84492cba13bd1c04"]}) 2018/04/13 19:42:32 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x4000000011) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000000)) 2018/04/13 19:42:32 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xa9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0ffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/13 19:42:32 executing program 1: kexec_load(0x0, 0x0, &(0x7f0000000100), 0x1) syzkaller login: [ 43.279313] ip (3776) used greatest stack depth: 54672 bytes left [ 43.655354] ip (3811) used greatest stack depth: 54312 bytes left [ 44.454106] ip (3888) used greatest stack depth: 54200 bytes left [ 44.636849] ip (3905) used greatest stack depth: 53960 bytes left [ 44.830090] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.836631] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.875111] device bridge_slave_0 entered promiscuous mode [ 44.936311] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.942814] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.978851] device bridge_slave_0 entered promiscuous mode [ 45.034671] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.041179] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.079512] device bridge_slave_1 entered promiscuous mode [ 45.104316] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.110830] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.154097] device bridge_slave_0 entered promiscuous mode [ 45.173354] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.179854] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.210174] device bridge_slave_0 entered promiscuous mode [ 45.221239] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.227731] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.253523] device bridge_slave_0 entered promiscuous mode [ 45.269444] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.275894] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.296899] device bridge_slave_0 entered promiscuous mode [ 45.306763] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.314292] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.320782] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.344962] device bridge_slave_0 entered promiscuous mode [ 45.362814] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.369321] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.386140] device bridge_slave_1 entered promiscuous mode [ 45.393647] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.400138] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.417269] device bridge_slave_1 entered promiscuous mode [ 45.427788] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.434271] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.447125] device bridge_slave_0 entered promiscuous mode [ 45.456980] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.463462] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.479105] device bridge_slave_1 entered promiscuous mode [ 45.496879] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.508260] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.514734] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.524281] device bridge_slave_1 entered promiscuous mode [ 45.539158] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.546589] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.553142] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.587001] device bridge_slave_1 entered promiscuous mode [ 45.593537] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.600008] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.639582] device bridge_slave_1 entered promiscuous mode [ 45.649394] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.658662] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.667359] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.673803] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.717270] device bridge_slave_1 entered promiscuous mode [ 45.743151] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.765147] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.773206] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.849826] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.864738] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.880649] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.952247] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.963786] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.997557] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.113526] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.206569] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.460644] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.685313] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.748796] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.857471] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.869771] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.954936] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.974986] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.985492] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.082695] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.091559] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.153947] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.163874] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.182308] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.229965] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.369276] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.452552] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.717069] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.925539] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.020114] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.041706] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.150917] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.164423] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.180439] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.194384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.209275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.231772] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.242271] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.303181] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.329660] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.383671] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.390888] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.404093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.438905] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.448015] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.460376] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.481489] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.490019] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.497306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.506574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.538606] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.546444] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.554194] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.595011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.627890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.663847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.696700] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.706661] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.716522] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.728898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.740211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.759423] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.774414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.793256] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.802372] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.811620] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.818766] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.847716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.881612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.904941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.925479] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.937602] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.948680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.968019] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.981216] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.990941] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.011590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.048726] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.082885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.105435] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.113559] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.128479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.158212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.176901] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.196477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.224338] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.234779] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.248790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.281488] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.307859] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.336258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.982881] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.989402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.996336] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.002807] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.047441] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.054010] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.145729] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.152254] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.159163] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.165650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.221970] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.275580] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.282156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.289097] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.295565] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.383018] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.401351] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.407901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.414781] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.421281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.473954] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.493984] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.500522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.507470] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.513958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.550465] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.557256] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.563740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.570630] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.577147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.611580] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.628868] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.635382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.642316] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.648803] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.665740] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.675780] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.682275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.689175] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.696633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.743937] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.064360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.077788] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.112788] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.141790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.162670] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.170965] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.179142] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.917684] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.925205] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.964972] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.005165] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.059107] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.183667] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.191795] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.215519] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.694680] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.701083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.714701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.749919] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.756340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.782824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.800678] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.816760] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.824708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.837691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.855017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.871890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.892834] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.901353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.915801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.040387] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.046833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.055070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.099408] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.110135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.120872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.145142] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.157549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.189186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/13 19:42:59 executing program 6: open(&(0x7f0000000000)='./file0\x00', 0x3fd, 0x0) syz_mount_image$vfat(&(0x7f0000000600)='vfat\x00', &(0x7f0000000740)='./file0\x00', 0x0, 0xe5, &(0x7f0000000980), 0x1800, &(0x7f0000000a00)=ANY=[]) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_mount_image$bfs(&(0x7f0000000340)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xaaaaaaaaaaaac18, &(0x7f0000000300)=[{&(0x7f0000000100), 0x1be}], 0x0, 0x0) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) sendfile(r0, r0, &(0x7f0000000040), 0x7527fb3200000000) 2018/04/13 19:42:59 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000)) [ 68.189935] ================================================================== [ 68.197374] BUG: KMSAN: uninit-value in __crypto_memneq+0x2f9/0x490 [ 68.203790] CPU: 0 PID: 5762 Comm: syz-executor7 Not tainted 4.16.0+ #83 [ 68.210982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 68.220337] Call Trace: [ 68.222948] dump_stack+0x185/0x1d0 [ 68.226601] ? __crypto_memneq+0x2f9/0x490 [ 68.230847] kmsan_report+0x142/0x240 [ 68.234659] __msan_warning_32+0x6c/0xb0 [ 68.238728] __crypto_memneq+0x2f9/0x490 [ 68.242797] ? kernel_fpu_end+0x2c/0x1d0 [ 68.246868] ? gcmaes_decrypt+0x874/0xea0 [ 68.250997] ? kernel_fpu_end+0xba/0x1d0 [ 68.255053] gcmaes_decrypt+0x8d5/0xea0 [ 68.259035] generic_gcmaes_decrypt+0x181/0x1e0 [ 68.263786] ? generic_gcmaes_encrypt+0x1e0/0x1e0 [ 68.268622] gcmaes_wrapper_decrypt+0x2f5/0x340 [ 68.273287] ? gcmaes_wrapper_encrypt+0x2d0/0x2d0 [ 68.278127] aead_recvmsg+0x25b5/0x2960 [ 68.282096] aead_recvmsg_nokey+0x129/0x160 [ 68.286413] sock_recvmsg_nosec+0x109/0x140 [ 68.290715] ? aead_sendmsg_nokey+0x250/0x250 [ 68.295207] ___sys_recvmsg+0x3fb/0x810 [ 68.299186] ? __msan_poison_alloca+0x15c/0x1d0 [ 68.303855] ? _cond_resched+0x3c/0xd0 [ 68.307737] ? rcu_all_qs+0x32/0x1f0 [ 68.311436] ? _cond_resched+0x3c/0xd0 [ 68.315325] ? __sys_recvmmsg+0x908/0xdb0 [ 68.319879] ? rcu_all_qs+0x32/0x1f0 [ 68.323589] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 68.329053] __sys_recvmmsg+0x54e/0xdb0 [ 68.333060] SYSC_recvmmsg+0x29b/0x3e0 [ 68.336962] SyS_recvmmsg+0x76/0xa0 [ 68.340586] do_syscall_64+0x309/0x430 [ 68.344466] ? __sys_recvmmsg+0xdb0/0xdb0 [ 68.348616] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 68.353796] RIP: 0033:0x455319 [ 68.356975] RSP: 002b:00007fdd5641ec68 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 68.364683] RAX: ffffffffffffffda RBX: 00007fdd5641f6d4 RCX: 0000000000455319 [ 68.371940] RDX: 00000000000000fe RSI: 0000000020001bc0 RDI: 0000000000000014 [ 68.379201] RBP: 000000000072bea0 R08: 0000000020001d00 R09: 0000000000000000 [ 68.386456] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 68.393709] R13: 0000000000000495 R14: 00000000006f9e98 R15: 0000000000000000 [ 68.400965] [ 68.402592] Local variable description: ----authTag@gcmaes_decrypt [ 68.408884] Variable was created at: [ 68.412588] gcmaes_decrypt+0xd6/0xea0 [ 68.416459] generic_gcmaes_decrypt+0x181/0x1e0 [ 68.421102] ================================================================== [ 68.428442] Disabling lock debugging due to kernel taint [ 68.433879] Kernel panic - not syncing: panic_on_warn set ... [ 68.433879] [ 68.441239] CPU: 0 PID: 5762 Comm: syz-executor7 Tainted: G B 4.16.0+ #83 [ 68.449365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 68.458710] Call Trace: [ 68.461289] dump_stack+0x185/0x1d0 [ 68.464909] panic+0x39d/0x940 [ 68.468106] ? __crypto_memneq+0x2f9/0x490 [ 68.472325] kmsan_report+0x238/0x240 [ 68.476120] __msan_warning_32+0x6c/0xb0 [ 68.480174] __crypto_memneq+0x2f9/0x490 [ 68.484222] ? kernel_fpu_end+0x2c/0x1d0 [ 68.488272] ? gcmaes_decrypt+0x874/0xea0 [ 68.492409] ? kernel_fpu_end+0xba/0x1d0 [ 68.496454] gcmaes_decrypt+0x8d5/0xea0 [ 68.500419] generic_gcmaes_decrypt+0x181/0x1e0 [ 68.505084] ? generic_gcmaes_encrypt+0x1e0/0x1e0 [ 68.509913] gcmaes_wrapper_decrypt+0x2f5/0x340 [ 68.514566] ? gcmaes_wrapper_encrypt+0x2d0/0x2d0 [ 68.519404] aead_recvmsg+0x25b5/0x2960 [ 68.523385] aead_recvmsg_nokey+0x129/0x160 [ 68.527694] sock_recvmsg_nosec+0x109/0x140 [ 68.531999] ? aead_sendmsg_nokey+0x250/0x250 [ 68.536484] ___sys_recvmsg+0x3fb/0x810 [ 68.540443] ? __msan_poison_alloca+0x15c/0x1d0 [ 68.545101] ? _cond_resched+0x3c/0xd0 [ 68.548973] ? rcu_all_qs+0x32/0x1f0 [ 68.552667] ? _cond_resched+0x3c/0xd0 [ 68.556546] ? __sys_recvmmsg+0x908/0xdb0 [ 68.560675] ? rcu_all_qs+0x32/0x1f0 [ 68.564377] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 68.569815] __sys_recvmmsg+0x54e/0xdb0 [ 68.573779] SYSC_recvmmsg+0x29b/0x3e0 [ 68.577661] SyS_recvmmsg+0x76/0xa0 [ 68.581270] do_syscall_64+0x309/0x430 [ 68.585147] ? __sys_recvmmsg+0xdb0/0xdb0 [ 68.589281] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 68.594463] RIP: 0033:0x455319 [ 68.597807] RSP: 002b:00007fdd5641ec68 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 68.605497] RAX: ffffffffffffffda RBX: 00007fdd5641f6d4 RCX: 0000000000455319 [ 68.612753] RDX: 00000000000000fe RSI: 0000000020001bc0 RDI: 0000000000000014 [ 68.620018] RBP: 000000000072bea0 R08: 0000000020001d00 R09: 0000000000000000 [ 68.627288] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 68.634567] R13: 0000000000000495 R14: 00000000006f9e98 R15: 0000000000000000 [ 68.642279] Dumping ftrace buffer: [ 68.645812] (ftrace buffer empty) [ 68.649504] Kernel Offset: disabled [ 68.653108] Rebooting in 86400 seconds..