INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.25' (ECDSA) to the list of known hosts. 2018/04/19 19:34:57 fuzzer started 2018/04/19 19:34:57 dialing manager at 10.128.0.26:37327 2018/04/19 19:35:04 kcov=true, comps=false 2018/04/19 19:35:07 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a3c000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000306000)={&(0x7f00003d7ff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x104, 0x1a, 0x811, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x9}, {@in6, 0x0, 0x2b}, @in=@multicast1=0xe0000001, {}, {}, {}, 0x0, 0x0, 0x2}, [@coaddr={0x14, 0xe, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}]}, 0x104}, 0x1}, 0x0) 2018/04/19 19:35:07 executing program 2: r0 = socket(0x2, 0x3, 0xff) perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000000)="f2b0e7dc21847d9e6b88ed1e1e102c9dd9b359f9", 0x14, 0x0, &(0x7f0000001040)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/04/19 19:35:07 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000100), 0x78a, 0x8000, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @local={0xfe, 0x80, [], 0xaa}}, 0x1c) r1 = socket$packet(0x11, 0x400040000000003, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000683ff0)=[{0x6, 0x0, 0x0, 0x803}]}, 0x10) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000043c0)="86d8b4edd32a0e245b62469cc7633d4e640a334be3bd4104c5c19541963f20ccb1edf1b77d68c3a65913b25974fdd5ef6157e439532470a8f470c3aa", 0x3c}], 0x1, &(0x7f0000000200)}, 0x0) 2018/04/19 19:35:07 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400100401000200027400f8", 0x16}], 0x0, &(0x7f0000000140)) sendmsg$key(0xffffffffffffffff, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000df28)={0x2, 0x0, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 2018/04/19 19:35:07 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000037fe8)=[{}], 0x18) 2018/04/19 19:35:07 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet(r0, &(0x7f0000ac0fbb)="c4", 0x1, 0x0, &(0x7f00006e2000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000bd6f60)={0x0, @in={{0x2, 0x4e23, @loopback=0x7f000001}}}, &(0x7f0000f67000)=0xa0) 2018/04/19 19:35:07 executing program 5: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000cecffc), 0x4) r1 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) 2018/04/19 19:35:07 executing program 6: syz_emit_ethernet(0x66, &(0x7f00000f8000)={@random="cd390b081bf2", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "08de06", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback={0x0, 0x1}, @loopback={0x0, 0x1}}}}}}}}, 0x0) syzkaller login: [ 42.619521] ip (3781) used greatest stack depth: 54672 bytes left [ 42.625912] ip (3778) used greatest stack depth: 54408 bytes left [ 43.713547] ip (3888) used greatest stack depth: 54200 bytes left [ 44.056763] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.063284] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.110986] device bridge_slave_0 entered promiscuous mode [ 44.150632] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.157153] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.189545] device bridge_slave_0 entered promiscuous mode [ 44.234117] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.240629] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.261764] device bridge_slave_0 entered promiscuous mode [ 44.308316] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.314806] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.347556] device bridge_slave_1 entered promiscuous mode [ 44.376833] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.383328] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.431520] device bridge_slave_1 entered promiscuous mode [ 44.455326] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.461794] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.479016] device bridge_slave_0 entered promiscuous mode [ 44.516651] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.523245] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.553198] device bridge_slave_0 entered promiscuous mode [ 44.567255] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.573743] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.590246] device bridge_slave_0 entered promiscuous mode [ 44.605988] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.612483] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.628772] device bridge_slave_1 entered promiscuous mode [ 44.637781] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.646479] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.657850] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.664350] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.699970] device bridge_slave_0 entered promiscuous mode [ 44.728778] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.735249] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.764580] device bridge_slave_0 entered promiscuous mode [ 44.783589] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.790122] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.807894] device bridge_slave_1 entered promiscuous mode [ 44.817660] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.824182] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.847146] device bridge_slave_1 entered promiscuous mode [ 44.858982] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.865504] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.876108] device bridge_slave_1 entered promiscuous mode [ 44.885142] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.893151] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.904238] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.910753] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.940225] device bridge_slave_1 entered promiscuous mode [ 44.957265] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.964732] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.971263] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.006960] device bridge_slave_1 entered promiscuous mode [ 45.015607] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.025978] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.051128] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.108655] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.161319] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.214798] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.225192] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.237489] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.281992] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.294939] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.441540] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.864109] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.949187] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.060282] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.137433] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.155686] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.174306] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.283521] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.297815] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.341461] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.368779] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.402844] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.493889] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.502591] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.518944] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.551952] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.679555] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.973403] ip (4122) used greatest stack depth: 53656 bytes left [ 47.048757] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.182604] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.271786] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.357793] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.393908] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.446901] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.499994] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.507411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.523784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.551578] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.572795] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.580933] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.594551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.609489] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.618586] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.626859] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.651569] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.713876] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.721106] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.738773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.771582] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.792545] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.815362] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.822534] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.835905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.858281] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.866119] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.888803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.919541] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.927495] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.939863] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.948286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.963099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.010338] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.032339] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.039826] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.064782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.110631] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.121878] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.129429] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.150692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.178897] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.201325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.224398] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.237444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.256484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.273608] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.283314] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.298581] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.319290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.339389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.357138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.382906] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.392546] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.401622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.418843] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.427093] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.451722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.484826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.522174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.553304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.668681] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.675897] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.694606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.132229] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.138723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.145577] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.152100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.178726] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.185553] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.480596] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.487133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.493995] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.500464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.563892] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.596507] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.602999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.609901] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.616352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.671906] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.679125] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.685585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.692379] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.698831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.733134] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.747015] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.753520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.760390] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.766813] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.808991] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.822896] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.829388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.836344] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.842804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.870797] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.886483] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.892963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.899820] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.906257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.961135] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.997634] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.004139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.011022] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.017491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.087897] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.232401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.252868] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.286143] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.312651] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.328899] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.337258] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.345293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.727251] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.935637] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.168734] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.217286] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.265646] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.286134] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.361240] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.545926] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.552231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.563491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.758764] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.765172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.773700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.841893] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.011930] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.018292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.029705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.048528] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.055084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.064992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.094364] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.101659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.112676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.144287] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.150562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.172992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.223944] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.230313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.244100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.779897] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.786318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.796198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/19 19:35:33 executing program 1: syz_emit_ethernet(0x66, &(0x7f0000002000)=ANY=[@ANYBLOB="ffffffffffffaacbaaaa00ff86dd6076605100303a00fe8000000000000000000000000000ffff020000000000000000000000000001820090780000000060702b6c00000000ff010000000000168900000000000001fe800000000000000000000000004000"], 0x0) r0 = socket$inet(0x2, 0x8000a, 0x100) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/sockcreate\x00') perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x70, 0x1, 0xcf, 0x1, 0x4, 0x0, 0x2, 0x2000, 0x4, 0x100, 0x800, 0x0, 0x80000001, 0x7ff, 0x1, 0xd5, 0x0, 0x1, 0x60, 0x8, 0x7bce, 0x6, 0xba, 0xd978, 0xc4, 0x4, 0x0, 0x8, 0x3, 0x6, 0x5, 0x66e, 0x6, 0x6, 0x7fffffff, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000000), 0x8}, 0x4010, 0x6, 0x10001, 0x6, 0x9, 0xffff, 0x91}, r1, 0x2, r2, 0xa) [ 66.614807] syz-executor1 uses obsolete (PF_INET,SOCK_PACKET) 2018/04/19 19:35:33 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'bridge0\x00', 0x1002}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge0\x00', 0x3501}) fsetxattr(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6f731400e24865499d0c4f453053c4aacabd3d5e1b73db25bb86184b2eb725183d3ed506dfab000000000000000000"], &(0x7f0000000100)='/dev/net/tun\x00', 0xd, 0x2) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'bridge0\x00', {0x2, 0x0, @loopback=0x7f000001}}) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x7fff, 0x80000) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) 2018/04/19 19:35:33 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000e40fee)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0xfff) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_score\x00') getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000040)={0x0, 0x42, "f272d73daf55996d8d28ff71519b1bb01fd97441f3c1af1db10a9683e0bff8b9ad257492a01dce1abc50ebdd478f2338c7548ae2fb28b68e9284d11e485e3d120f88"}, &(0x7f00000000c0)=0x4a) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000100)={r2, 0x9b, "e122749582b5d30b406497d96cfe457352ffcf9f8d4741e671eab8892f753e9c07a7147348a5985d9c5c287cb7e266513bd9a6987e453bf0957a208f897c5c1dbc10abe85d3d03e1ce5b516170f0bcfe97e07c796c98d1098f3fdd4665ebdaa600f57c76f9e0e96a269e0b045d725bd17066fe418ee4f50b40e4ca336149e82cb5e280479db33da7e5865d62d34e83ac42bdbf49a3c7a94cc9a2ae"}, &(0x7f00000001c0)=0xa3) 2018/04/19 19:35:33 executing program 4: socketpair$unix(0x1, 0x1000000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x10000, 0x0) fdatasync(r2) accept4$llc(r2, 0x0, &(0x7f0000000040), 0x800) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000021ff0)={0x2, &(0x7f0000000380)=[{0x28, 0x0, 0x0, 0xfffffffffffff010}, {0x6}]}, 0x10) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000140)={0x2, 0x0, 0x1, 0xff}) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000180)={r3, 0x7}) write(r1, &(0x7f0000000680)="fdb2f96f", 0x4) getsockopt$inet_tcp_int(r2, 0x6, 0x1, &(0x7f0000000080), &(0x7f0000000100)=0x4) [ 66.956288] device bridge0 entered promiscuous mode [ 67.378750] ================================================================== [ 67.386174] BUG: KMSAN: uninit-value in csum_partial+0x78e/0x850 [ 67.392303] CPU: 1 PID: 5785 Comm: syz-executor7 Not tainted 4.16.0+ #84 [ 67.399117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 67.408450] Call Trace: [ 67.411016] [ 67.413158] dump_stack+0x185/0x1d0 [ 67.416766] ? csum_partial+0x78e/0x850 [ 67.420723] kmsan_report+0x142/0x240 [ 67.424506] __msan_warning_32+0x6c/0xb0 [ 67.428546] csum_partial+0x78e/0x850 [ 67.432331] csum_partial_ext+0x89/0xa0 [ 67.436284] __skb_checksum+0x6d4/0x1010 [ 67.440327] ? skb_checksum+0x120/0x120 [ 67.444288] skb_checksum+0xec/0x120 [ 67.447978] ? skb_checksum+0x120/0x120 [ 67.451948] ? csum_partial_ext+0xa0/0xa0 [ 67.456101] __skb_checksum_complete+0x90/0x400 [ 67.460762] __udp6_lib_rcv+0x21e1/0x3920 [ 67.464892] ? ip6_input_finish+0x55c/0x2110 [ 67.469287] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 67.474635] udpv6_rcv+0x5c/0x70 [ 67.477984] ? udp_v6_early_demux+0x11a0/0x11a0 [ 67.482635] ip6_input_finish+0xa62/0x2110 [ 67.486856] ? ip6table_filter_hook+0xb5/0xe0 [ 67.491334] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 67.496702] ? ip6_input_finish+0x12a1/0x2110 [ 67.501194] ip6_input+0x294/0x320 [ 67.504728] ? ip6_input+0x320/0x320 [ 67.508432] ? ipv6_rcv+0x26d0/0x26d0 [ 67.512212] ipv6_rcv+0x20ec/0x26d0 [ 67.515819] ? local_bh_enable+0x40/0x40 [ 67.519868] __netif_receive_skb_core+0x47cf/0x4a80 [ 67.524864] ? try_to_wake_up+0x1ab2/0x20a0 [ 67.529167] ? ip6_rcv_finish+0x4d0/0x4d0 [ 67.533295] process_backlog+0x62d/0xe20 [ 67.537351] ? rps_trigger_softirq+0x2f0/0x2f0 [ 67.541911] net_rx_action+0x7c1/0x1a70 [ 67.545864] ? net_tx_action+0xab0/0xab0 [ 67.549908] __do_softirq+0x56d/0x93d [ 67.553689] do_softirq_own_stack+0x2a/0x40 [ 67.557983] [ 67.560217] __local_bh_enable_ip+0x114/0x140 [ 67.564693] local_bh_enable+0x36/0x40 [ 67.568568] ip6_finish_output2+0x1b6c/0x1f20 [ 67.573062] ip6_finish_output+0xb3f/0xc00 [ 67.577297] ip6_output+0x597/0x6c0 [ 67.580912] ? ip6_output+0x6c0/0x6c0 [ 67.584691] ? ac6_seq_show+0x200/0x200 [ 67.588644] ip6_local_out+0x573/0x640 [ 67.592511] ? __ip6_local_out+0x4f0/0x4f0 [ 67.596725] ip6_send_skb+0xfa/0x380 [ 67.600422] udp_v6_send_skb+0x116a/0x1880 [ 67.604647] udpv6_sendmsg+0x15f4/0x45b0 [ 67.608690] ? rw_copy_check_uvector+0x5af/0x6c0 [ 67.613429] ? rw_copy_check_uvector+0x643/0x6c0 [ 67.618166] ? ip_copy_metadata+0xac0/0xac0 [ 67.622474] ? udpv6_queue_rcv_skb+0x1c60/0x1c60 [ 67.627208] inet_sendmsg+0x48d/0x740 [ 67.630987] ? security_socket_sendmsg+0x9e/0x210 [ 67.635810] ? inet_getname+0x500/0x500 [ 67.639765] ___sys_sendmsg+0xec0/0x1310 [ 67.643807] ? switch_fpu_finish+0x6e/0x4d0 [ 67.648109] ? __fdget+0x4e/0x60 [ 67.651453] ? __fget_light+0x56/0x710 [ 67.655316] ? __fdget+0x4e/0x60 [ 67.658664] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 67.664012] ? __fget_light+0x6b9/0x710 [ 67.667977] SYSC_sendmsg+0x2a3/0x3d0 [ 67.671776] SyS_sendmsg+0x54/0x80 [ 67.675301] do_syscall_64+0x309/0x430 [ 67.679174] ? ___sys_sendmsg+0x1310/0x1310 [ 67.683478] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 67.688645] RIP: 0033:0x455329 [ 67.691819] RSP: 002b:00007feb04e96c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 67.699513] RAX: ffffffffffffffda RBX: 00007feb04e976d4 RCX: 0000000000455329 [ 67.706770] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000013 [ 67.714026] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 67.721283] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 67.728529] R13: 00000000000004d5 R14: 00000000006fa498 R15: 0000000000000000 [ 67.735780] [ 67.737381] Uninit was created at: [ 67.740904] kmsan_alloc_meta_for_pages+0x161/0x3a0 [ 67.745897] kmsan_alloc_page+0x82/0xe0 [ 67.749867] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 67.754603] alloc_pages_current+0x6b5/0x970 [ 67.759001] skb_page_frag_refill+0x3ba/0x5e0 [ 67.763479] sk_page_frag_refill+0xa4/0x340 [ 67.767780] __ip6_append_data+0x1a20/0x4bb0 [ 67.772165] ip6_append_data+0x40e/0x6b0 [ 67.776212] udpv6_sendmsg+0xfd5/0x45b0 [ 67.780171] inet_sendmsg+0x48d/0x740 [ 67.783963] ___sys_sendmsg+0xec0/0x1310 [ 67.788011] SYSC_sendmsg+0x2a3/0x3d0 [ 67.791797] SyS_sendmsg+0x54/0x80 [ 67.795315] do_syscall_64+0x309/0x430 [ 67.799188] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 67.804349] ================================================================== [ 67.811692] Disabling lock debugging due to kernel taint [ 67.817144] Kernel panic - not syncing: panic_on_warn set ... [ 67.817144] [ 67.824487] CPU: 1 PID: 5785 Comm: syz-executor7 Tainted: G B 4.16.0+ #84 [ 67.832600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 67.841937] Call Trace: [ 67.844505] [ 67.846644] dump_stack+0x185/0x1d0 [ 67.850251] panic+0x39d/0x940 [ 67.853431] ? csum_partial+0x78e/0x850 [ 67.857384] kmsan_report+0x238/0x240 [ 67.861162] __msan_warning_32+0x6c/0xb0 [ 67.865202] csum_partial+0x78e/0x850 [ 67.868993] csum_partial_ext+0x89/0xa0 [ 67.872950] __skb_checksum+0x6d4/0x1010 [ 67.876993] ? skb_checksum+0x120/0x120 [ 67.880948] skb_checksum+0xec/0x120 [ 67.884638] ? skb_checksum+0x120/0x120 [ 67.888589] ? csum_partial_ext+0xa0/0xa0 [ 67.892718] __skb_checksum_complete+0x90/0x400 [ 67.897367] __udp6_lib_rcv+0x21e1/0x3920 [ 67.901496] ? ip6_input_finish+0x55c/0x2110 [ 67.905887] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 67.911233] udpv6_rcv+0x5c/0x70 [ 67.914578] ? udp_v6_early_demux+0x11a0/0x11a0 [ 67.919228] ip6_input_finish+0xa62/0x2110 [ 67.923444] ? ip6table_filter_hook+0xb5/0xe0 [ 67.927919] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 67.933265] ? ip6_input_finish+0x12a1/0x2110 [ 67.937748] ip6_input+0x294/0x320 [ 67.941269] ? ip6_input+0x320/0x320 [ 67.944962] ? ipv6_rcv+0x26d0/0x26d0 [ 67.948741] ipv6_rcv+0x20ec/0x26d0 [ 67.952346] ? local_bh_enable+0x40/0x40 [ 67.956389] __netif_receive_skb_core+0x47cf/0x4a80 [ 67.961383] ? try_to_wake_up+0x1ab2/0x20a0 [ 67.965686] ? ip6_rcv_finish+0x4d0/0x4d0 [ 67.969814] process_backlog+0x62d/0xe20 [ 67.973856] ? rps_trigger_softirq+0x2f0/0x2f0 [ 67.978446] net_rx_action+0x7c1/0x1a70 [ 67.982412] ? net_tx_action+0xab0/0xab0 [ 67.986460] __do_softirq+0x56d/0x93d [ 67.990246] do_softirq_own_stack+0x2a/0x40 [ 67.994554] [ 67.996792] __local_bh_enable_ip+0x114/0x140 [ 68.001265] local_bh_enable+0x36/0x40 [ 68.005131] ip6_finish_output2+0x1b6c/0x1f20 [ 68.009632] ip6_finish_output+0xb3f/0xc00 [ 68.013856] ip6_output+0x597/0x6c0 [ 68.017465] ? ip6_output+0x6c0/0x6c0 [ 68.021246] ? ac6_seq_show+0x200/0x200 [ 68.025207] ip6_local_out+0x573/0x640 [ 68.029091] ? __ip6_local_out+0x4f0/0x4f0 [ 68.033306] ip6_send_skb+0xfa/0x380 [ 68.037001] udp_v6_send_skb+0x116a/0x1880 [ 68.041226] udpv6_sendmsg+0x15f4/0x45b0 [ 68.045269] ? rw_copy_check_uvector+0x5af/0x6c0 [ 68.050006] ? rw_copy_check_uvector+0x643/0x6c0 [ 68.054759] ? ip_copy_metadata+0xac0/0xac0 [ 68.059082] ? udpv6_queue_rcv_skb+0x1c60/0x1c60 [ 68.063817] inet_sendmsg+0x48d/0x740 [ 68.067597] ? security_socket_sendmsg+0x9e/0x210 [ 68.072422] ? inet_getname+0x500/0x500 [ 68.076377] ___sys_sendmsg+0xec0/0x1310 [ 68.080430] ? switch_fpu_finish+0x6e/0x4d0 [ 68.084740] ? __fdget+0x4e/0x60 [ 68.088106] ? __fget_light+0x56/0x710 [ 68.091973] ? __fdget+0x4e/0x60 [ 68.095330] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 68.100679] ? __fget_light+0x6b9/0x710 [ 68.104644] SYSC_sendmsg+0x2a3/0x3d0 [ 68.108431] SyS_sendmsg+0x54/0x80 [ 68.111952] do_syscall_64+0x309/0x430 [ 68.115821] ? ___sys_sendmsg+0x1310/0x1310 [ 68.120123] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 68.125291] RIP: 0033:0x455329 [ 68.128466] RSP: 002b:00007feb04e96c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 68.136154] RAX: ffffffffffffffda RBX: 00007feb04e976d4 RCX: 0000000000455329 [ 68.143412] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000013 [ 68.150669] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 68.157920] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 68.165170] R13: 00000000000004d5 R14: 00000000006fa498 R15: 0000000000000000 [ 68.172941] Dumping ftrace buffer: [ 68.176458] (ftrace buffer empty) [ 68.180141] Kernel Offset: disabled [ 68.183740] Rebooting in 86400 seconds..