[info] Using makefile-style concurrent boot in runlevel 2.
[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
Starting mcstransd: 
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added '10.128.0.15' (ECDSA) to the list of known hosts.
2019/09/23 12:06:08 fuzzer started
2019/09/23 12:06:09 dialing manager at 10.128.0.105:39541
2019/09/23 12:06:09 syscalls: 2425
2019/09/23 12:06:09 code coverage: CONFIG_KCOV is not enabled
2019/09/23 12:06:09 comparison tracing: CONFIG_KCOV is not enabled
2019/09/23 12:06:09 extra coverage: CONFIG_KCOV is not enabled
2019/09/23 12:06:09 setuid sandbox: enabled
2019/09/23 12:06:09 namespace sandbox: enabled
2019/09/23 12:06:09 Android sandbox: /sys/fs/selinux/policy does not exist
2019/09/23 12:06:09 fault injection: kernel does not have systematic fault injection support
2019/09/23 12:06:09 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2019/09/23 12:06:09 net packet injection: enabled
2019/09/23 12:06:09 net device setup: enabled
12:06:09 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00\xc0\x87\xeaU\x01\x1e\x14\xc9\xe3G\xdd\x1fU\xa6\x02j\x1c\xb7\xe0g\xf3\xc5w\x98\x1c\t\x94\xa1\xe8\r\x90\xd4\x9dh\xbd\xbc\x91\xfa\xb9\xc1\xc7\xf0c\xe6v\xe8<t\x0e-du4\xa1\x04XP\xa26e\xd8\x1c\xa0rp\x19?]\x00<\x10\xe3B9\x84L[n\x8d\x17!\xc0\xb5:\x91\xc2\xf6\xec\x1eT\x84d]\xb3\xdf')
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='clear_refs\x00')
sendfile(r1, r0, 0x0, 0x40000d)

12:06:09 executing program 1:
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x507}, 0x24}}, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000040))
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x8000000000000085, 0x0)
r1 = dup(r0)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0xee72)
sendfile(r1, r2, 0x0, 0x8000fffffffe)

12:06:09 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{&(0x7f00000002c0)=@ipx, 0x19, 0x0}, 0x800}], 0x1, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000140)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0)
ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, 0x0)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xa)
r4 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r3, r4, &(0x7f00000001c0)=0x202, 0x8)

12:06:09 executing program 3:
openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x8801, 0x0)
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x38)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x0, 0x0, 0x3, 0x1})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
keyctl$chown(0x4, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070")
ptrace$cont(0x7, r0, 0x0, 0x0)

12:06:09 executing program 2:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @mcast2}, {0x1b, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}}}, 0x48)

12:06:09 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b40, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='ip6_vti0\x00', 0x1000001d0)
sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x240, 0x0, 0xffffffffffffff37)

syzkaller login: [   44.234233] IPv6: ADDRCONF(NETDEV_CHANGE): nr0: link becomes ready
[   44.241576] IPv6: ADDRCONF(NETDEV_CHANGE): nr5: link becomes ready
[   44.248027] IPv6: ADDRCONF(NETDEV_CHANGE): nr3: link becomes ready
[   44.249074] IPVS: Creating netns size=2712 id=1
[   44.249086] IPVS: ftp: loaded support on port[0] = 21
[   44.264949] IPv6: ADDRCONF(NETDEV_CHANGE): nr4: link becomes ready
[   44.271749] IPv6: ADDRCONF(NETDEV_CHANGE): nr2: link becomes ready
[   44.281738] IPv6: ADDRCONF(NETDEV_CHANGE): nr1: link becomes ready
[   44.290843] IPVS: Creating netns size=2712 id=2
[   44.295572] IPVS: ftp: loaded support on port[0] = 21
[   44.306334] chnl_net:caif_netlink_parms(): no params data found
[   44.313484] ------------[ cut here ]------------
[   44.318240] WARNING: CPU: 1 PID: 5648 at net/batman-adv/main.c:750 batadv_tvlv_container_remove+0x7b/0x80()
[   44.328165] Kernel panic - not syncing: panic_on_warn set ...
[   44.328165] 
[   44.335502] CPU: 1 PID: 5648 Comm: syz-executor.0 Not tainted 4.4.194 #0
[   44.342310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   44.351638]  0000000000000082 ffff88012a63f870 ffffffff818a6f22 0000000000000000
[   44.359661]  ffffffff82e96378 ffffffff8300ac2f ffff88012a63f8e8 ffffffff8126f9bc
[   44.367686]  ffff880100000008 ffff88012a63f8f8 ffff88012a63f898 ffffffff81274e1f
[   44.375684] Call Trace:
[   44.378242]  [<ffffffff818a6f22>] dump_stack+0xa1/0xdf
[   44.383489]  [<ffffffff8126f9bc>] panic+0xd2/0x225
[   44.388387]  [<ffffffff81274e1f>] ? printk+0x48/0x4a
[   44.393456]  [<ffffffff8126fb35>] warn_slowpath_common.cold+0x16/0x16
[   44.400004]  [<ffffffff811715f5>] warn_slowpath_null+0x15/0x20
[   44.405961]  [<ffffffff825e852b>] batadv_tvlv_container_remove+0x7b/0x80
[   44.412769]  [<ffffffff825e9333>] batadv_tvlv_container_register+0xb3/0x120
[   44.419850]  [<ffffffff825e27b6>] batadv_dat_tvlv_container_update+0x26/0x40
[   44.427004]  [<ffffffff825e321a>] batadv_dat_init+0x6a/0x80
[   44.432683]  [<ffffffff825e89b9>] batadv_mesh_init+0x239/0x290
[   44.438624]  [<ffffffff825f3b11>] batadv_softif_init_late+0x271/0x2c0
[   44.445169]  [<ffffffff820e542a>] register_netdevice+0xfa/0x450
[   44.451199]  [<ffffffff820f4e85>] rtnl_newlink+0x8a5/0x910
[   44.456792]  [<ffffffff820f475d>] ? rtnl_newlink+0x17d/0x910
[   44.462561]  [<ffffffff820f3440>] rtnetlink_rcv_msg+0x170/0x1e0
[   44.468589]  [<ffffffff811c48fd>] ? trace_hardirqs_on+0xd/0x10
[   44.474548]  [<ffffffff8264f0fa>] ? mutex_lock_nested+0x30a/0x5a0
[   44.480806]  [<ffffffff820f32b7>] ? rtnetlink_rcv+0x17/0x30
[   44.486486]  [<ffffffff820f32d0>] ? rtnetlink_rcv+0x30/0x30
[   44.492165]  [<ffffffff82157821>] netlink_rcv_skb+0x31/0xc0
[   44.497932]  [<ffffffff820f32c6>] rtnetlink_rcv+0x26/0x30
[   44.503436]  [<ffffffff82157298>] netlink_unicast+0x168/0x210
[   44.509288]  [<ffffffff82157531>] netlink_sendmsg+0x1f1/0x390
[   44.515147]  [<ffffffff820c01f5>] sock_sendmsg+0x35/0x40
[   44.520567]  [<ffffffff820c067d>] SYSC_sendto+0xed/0x160
[   44.525988]  [<ffffffff820bd88c>] ? sock_alloc_file+0x8c/0x120
[   44.531929]  [<ffffffff813247d2>] ? fd_install+0x22/0x30
[   44.537350]  [<ffffffff81003044>] ? lockdep_sys_exit_thunk+0x12/0x14
[   44.543811]  [<ffffffff820c1509>] SyS_sendto+0x9/0x10
[   44.548970]  [<ffffffff826548bc>] entry_SYSCALL_64_fastpath+0x1c/0x7c
[   44.556904] Kernel Offset: disabled
[   44.560531] Rebooting in 86400 seconds..