INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.45' (ECDSA) to the list of known hosts. 2018/04/16 00:20:26 fuzzer started 2018/04/16 00:20:26 dialing manager at 10.128.0.26:36243 2018/04/16 00:20:33 kcov=true, comps=false 2018/04/16 00:20:36 executing program 0: 2018/04/16 00:20:36 executing program 1: 2018/04/16 00:20:36 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6050a09c07f40600fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000000089078ffb0e73ec445c2e8aeec361b31b264447cd5aa7344f00f35bcc837858e2f238afeec6e4dcdeee27f2775f49892a769e89f3a82e4083cd5851ce39540e8a0aec4378a06fed8590093350f09c89168ea35ca2b405b7946203fdfcf13b485e8a3036aad314bf6756b46bf0318fc706f04fa780a2d90970e31cecaf1a0c2438c112e90bee2"], &(0x7f00000000c0)={0x0, 0x2, [0x0, 0x82a]}) 2018/04/16 00:20:36 executing program 7: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xc, 0x3, &(0x7f0000c91000)=ANY=[@ANYBLOB="850000001e00000017000000000000009500000067000000"], &(0x7f0000000000)='GPL\x00', 0x1, 0x99, &(0x7f000000d000)=""/153}, 0x48) 2018/04/16 00:20:36 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001cc0)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000005a00130a000000000000000000000000"], 0x1}, 0x1}, 0x0) 2018/04/16 00:20:36 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x1000000010, 0x10002}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/16 00:20:36 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0xb}, 0x7a) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, &(0x7f0000000040)) 2018/04/16 00:20:36 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @loopback=0x7f000001}, 0x10) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0) syzkaller login: [ 45.025444] ip (3767) used greatest stack depth: 54672 bytes left [ 45.187171] ip (3784) used greatest stack depth: 54408 bytes left [ 45.524334] ip (3814) used greatest stack depth: 54072 bytes left [ 46.328203] ip (3892) used greatest stack depth: 53656 bytes left [ 46.621420] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.628013] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.674582] device bridge_slave_0 entered promiscuous mode [ 46.723302] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.729859] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.762139] device bridge_slave_0 entered promiscuous mode [ 46.797606] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.804119] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.825891] device bridge_slave_0 entered promiscuous mode [ 46.887513] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.894104] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.926901] device bridge_slave_1 entered promiscuous mode [ 46.958291] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.964787] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.988313] device bridge_slave_1 entered promiscuous mode [ 46.996480] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.002957] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.019597] device bridge_slave_1 entered promiscuous mode [ 47.046290] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.052794] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.078792] device bridge_slave_0 entered promiscuous mode [ 47.093935] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.100453] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.128376] device bridge_slave_0 entered promiscuous mode [ 47.150532] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.157084] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.176991] device bridge_slave_0 entered promiscuous mode [ 47.187366] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.206300] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.216968] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.227238] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.233817] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.252623] device bridge_slave_0 entered promiscuous mode [ 47.275727] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.282211] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.321464] device bridge_slave_1 entered promiscuous mode [ 47.330268] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.336766] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.380707] device bridge_slave_1 entered promiscuous mode [ 47.389978] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.396459] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.412988] device bridge_slave_0 entered promiscuous mode [ 47.428116] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.438098] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.452702] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.462939] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.472419] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.478937] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.516126] device bridge_slave_1 entered promiscuous mode [ 47.539735] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.546231] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.571688] device bridge_slave_1 entered promiscuous mode [ 47.580428] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.622452] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.629140] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.666722] device bridge_slave_1 entered promiscuous mode [ 47.673668] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.724323] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.733847] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.745653] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.835470] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.945093] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.959486] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.047942] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.434118] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.460186] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.549627] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.640721] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.666706] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.688149] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.720627] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.784136] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.893479] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.924063] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.939429] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.961737] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 49.022786] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 49.114502] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.198068] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.231800] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.662713] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.699524] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.773472] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.865552] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.890629] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.910077] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.941613] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.980760] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.091509] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.098769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.120336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.138169] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.155082] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.164439] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.171793] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.179324] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.194957] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.211772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.252265] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.259468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.276970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.334719] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.342651] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.349812] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.360764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.399986] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.408008] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.424090] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.431606] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.439336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.450839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.493580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.520709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.538374] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.552915] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.560183] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.576830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.599083] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.620395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.640677] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.656586] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.664512] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.672583] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.691645] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.730691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.750897] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.767813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.786587] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.796562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.812888] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.820164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.834705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.857754] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.865413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.883105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.897378] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.918133] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.940755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.969966] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.992723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.023551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.113464] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.120680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.136822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.789687] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.796226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.803167] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.809673] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.866580] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.874375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.908188] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.914685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.921519] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.927975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.005922] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.064930] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.071422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.078332] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.084784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.151914] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.160918] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.167397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.174301] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.180737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.189289] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.213651] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.220133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.227004] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.233479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.307947] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.315194] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.321685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.328553] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.335072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.379961] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.400219] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.406713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.413561] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.420079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.487942] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.496310] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.503483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.510302] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.516738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.540712] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.920890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.936733] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.974315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.983463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.991175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.998778] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.006665] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.049181] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.132389] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.371784] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.647856] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.694909] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.728246] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.760885] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.767185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.784342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.822535] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.854746] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.895141] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.901424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.915639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.170575] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.176845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.188626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.441583] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.447858] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.455733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.496765] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.503867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.514612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.543111] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.562012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.596671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.641666] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.649317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.675606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.730378] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.737792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.753558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/16 00:21:02 executing program 3: 2018/04/16 00:21:03 executing program 0: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000000)="240000002a00070032f00008004a7700fbffffff010000ffffff0e00ff10e4814cce125c", 0x24) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000040), 0x4) 2018/04/16 00:21:03 executing program 4: 2018/04/16 00:21:03 executing program 3: 2018/04/16 00:21:03 executing program 1: 2018/04/16 00:21:03 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) recvmsg(r0, &(0x7f0000000680)={&(0x7f0000000300)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000540)=""/176, 0xb0}], 0x1, &(0x7f0000000600)=""/100, 0x64}, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001000)="8e86a4b9500a1139a0d93a78de7ed00ae239537b41a4eacfcfd438dfbe84ef20bd7e66cfb9bde86f5b1d1bae840e6c373fd2d58909d8ac8f1aca1b6e95b92948d4525d", 0x43}], 0x1, &(0x7f0000002000)}, 0x8000) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002ff0)=[{&(0x7f0000000040)="bce5", 0x2}], 0x1, &(0x7f000000ae80)}, 0x0) 2018/04/16 00:21:03 executing program 7: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000d6d000)={0x0, 0x2000000000069}, 0xb) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x5, 0x4) sendto$inet6(r0, &(0x7f0000359fff)="97", 0x1, 0x0, &(0x7f0000aaa000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) read(r0, &(0x7f00005f6000)=""/99, 0x60f) 2018/04/16 00:21:03 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) recvmsg(r0, &(0x7f0000000680)={&(0x7f0000000300)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000380)=[{&(0x7f00000004c0)=""/67, 0x43}, {&(0x7f0000000540)=""/176, 0xb0}], 0x2, &(0x7f0000000600)=""/100, 0x64}, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001000)="8e86a4b9500a1139a0d93a78de7ed00ae239537b41a4eacfcfd438dfbe84ef20bd7e66cfb9bde86f5b1d1bae840e6c373fd2d58909d8ac8f1aca1b6e95b92948d4525d", 0x43}], 0x1, &(0x7f0000002000)}, 0x8000) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002ff0)=[{&(0x7f0000000040)="bce5", 0x2}], 0x1, &(0x7f000000ae80)}, 0x0) 2018/04/16 00:21:03 executing program 2: r0 = socket$inet(0x2, 0x3, 0x19) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2=0xe0000002, @in=@multicast1=0xe0000001}}, {{@in6}, 0x0, @in6=@loopback={0x0, 0x1}}}, 0xe8) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/16 00:21:03 executing program 1: mkdir(&(0x7f0000cb3ff8)='./file0\x00', 0x0) chroot(&(0x7f000009a000)='./file0\x00') socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000000)) mount(&(0x7f00005b9ff8)='./file0\x00', &(0x7f0000edaff8)='./file0\x00', &(0x7f0000d9fffa)='msdos\x00', 0x1002, 0x0) chroot(&(0x7f0000000040)='./file0\x00') chdir(&(0x7f0000cd2ff8)='./file0\x00') umount2(&(0x7f0000e28000)='..', 0x2) lstat(&(0x7f0000005b40)='..', &(0x7f0000005b80)) 2018/04/16 00:21:03 executing program 3: open(&(0x7f0000000240)='./file0\x00', 0x10400, 0x1aa) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@rand_addr, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) fchown(r1, r2, r4) r5 = socket$netlink(0x10, 0x3, 0x1) sched_setattr(r3, &(0x7f0000000300)={0x30, 0x1, 0x0, 0x80, 0x8, 0x8, 0x7, 0xc95}, 0x0) mmap(&(0x7f0000000000/0x57000)=nil, 0x57000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt$netlink(r5, 0x10e, 0xb, &(0x7f0000000080)=""/8, &(0x7f0000706ffc)=0x8) ptrace$getenv(0x4201, r3, 0xd898, &(0x7f00000002c0)) 2018/04/16 00:21:03 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60c22df700108900fe800000000000000000000000000000fe8000000000000000000000000000aa0000000004019078000087ae00ca83452c8bac2ecee14ca59c41abf18c267c8d4bb5da8f41f6b1f442e715cad3d51399a6479ec2677fb69c920c6d40eacf93a2ff467e1f446bc49ee20ee0773f34b3c7dd779b4a6fd0d63744df32274ae270292e3952230ca7a0f303bedcf044bb628ea86293caba280da00ecffa"], &(0x7f0000001780)) 2018/04/16 00:21:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x80045440, &(0x7f0000da8000)) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x10181, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) sendmsg$nfc_llcp(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x27, 0x1, 0x0, 0x7, 0x40, 0x2, "d9c5d2d0b68114b7d2f93b72ccc85e48b2ff95c65856eeabcc8ccdf2de2c41d69ab72c0cea44b7a2861851feb2c466fe1b682a6fc7e64fe9046c3b042bc28c", 0x3c}, 0x60, &(0x7f0000000240)=[{&(0x7f0000000100)="e550b390131c9234b4505b2279f00b08db151a67ce", 0x15}, {&(0x7f0000000140)="4fa8491a45872e58852751293ff97430a430fc4d7dfeb58571d238baeb885c0b6c98766c599f2ee7aaef0b1e184a4a8a54a46f6132a492114312ac8f493924a39b6c48a72a5a32b0b411b128ba5fbb7857193065401962babd058876d5f943221c0f23139da6045241dd96f1ffc5759e519426d1a636556be4c6622a41d6e70ffb7553f2f8475506c5921fc17887acd4d48d956cc6778389f2d2b847dd7fa8b3e57349e3cd99851cb59de539e7b8659fd8f17de45260537f", 0xb8}, {&(0x7f0000000200)="ba75e45d0693f0879c884208458a368af47997cfdfb47f423dd9afd9771e", 0x1e}], 0x3, 0x0, 0x0, 0x40}, 0x4014) [ 70.233985] ================================================================== [ 70.241419] BUG: KMSAN: uninit-value in csum_partial_copy_to_user+0x450/0x500 [ 70.248694] CPU: 1 PID: 5769 Comm: syz-executor5 Not tainted 4.16.0+ #83 [ 70.255524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 70.264862] Call Trace: [ 70.267457] dump_stack+0x185/0x1d0 [ 70.271103] ? csum_partial_copy_to_user+0x450/0x500 [ 70.276200] kmsan_report+0x142/0x240 [ 70.279989] __msan_warning_32+0x6c/0xb0 [ 70.284036] csum_partial_copy_to_user+0x450/0x500 [ 70.288952] csum_and_copy_to_iter+0x3dc/0x2140 [ 70.293609] ? kmsan_set_origin_inline+0x6b/0x120 [ 70.298437] ? __msan_poison_alloca+0x15c/0x1d0 [ 70.303099] skb_copy_and_csum_datagram+0x6d2/0x1080 [ 70.308217] skb_copy_and_csum_datagram_msg+0x557/0x960 [ 70.313595] udpv6_recvmsg+0xc65/0x29e0 [ 70.317577] ? udp6_lib_lookup_skb+0x240/0x240 [ 70.322154] inet_recvmsg+0x4c2/0x5f0 [ 70.325944] sock_recvmsg+0x1d0/0x230 [ 70.329740] ? inet_sendpage+0x8c0/0x8c0 [ 70.333789] ___sys_recvmsg+0x3fb/0x810 [ 70.337761] ? __fget_light+0x56/0x710 [ 70.342263] ? __fdget+0x4e/0x60 [ 70.345613] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 70.350956] ? __fget_light+0x6b9/0x710 [ 70.354914] SYSC_recvmsg+0x298/0x3c0 [ 70.358710] SyS_recvmsg+0x54/0x80 [ 70.362244] do_syscall_64+0x309/0x430 [ 70.366125] ? ___sys_recvmsg+0x810/0x810 [ 70.370271] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 70.375444] RIP: 0033:0x455319 [ 70.378620] RSP: 002b:00007f50ce18cc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 70.386309] RAX: ffffffffffffffda RBX: 00007f50ce18d6d4 RCX: 0000000000455319 [ 70.393566] RDX: 0000000000000000 RSI: 0000000020000680 RDI: 0000000000000013 [ 70.400823] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 70.408084] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 70.415341] R13: 0000000000000496 R14: 00000000006f9eb0 R15: 0000000000000000 [ 70.422606] [ 70.424217] Uninit was created at: [ 70.427742] kmsan_alloc_meta_for_pages+0x161/0x3a0 [ 70.432738] kmsan_alloc_page+0x82/0xe0 [ 70.436699] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 70.441445] alloc_pages_current+0x6b5/0x970 [ 70.445835] skb_page_frag_refill+0x3ba/0x5e0 [ 70.450325] sk_page_frag_refill+0xa4/0x340 [ 70.454651] __ip6_append_data+0x1a20/0x4bb0 [ 70.459068] ip6_append_data+0x40e/0x6b0 [ 70.463130] udpv6_sendmsg+0xfd5/0x45b0 [ 70.467105] inet_sendmsg+0x48d/0x740 [ 70.470932] ___sys_sendmsg+0xec0/0x1310 [ 70.475001] SYSC_sendmsg+0x2a3/0x3d0 [ 70.478810] SyS_sendmsg+0x54/0x80 [ 70.482355] do_syscall_64+0x309/0x430 [ 70.486251] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 70.491434] ================================================================== [ 70.498799] Disabling lock debugging due to kernel taint [ 70.504232] Kernel panic - not syncing: panic_on_warn set ... [ 70.504232] [ 70.511581] CPU: 1 PID: 5769 Comm: syz-executor5 Tainted: G B 4.16.0+ #83 [ 70.519698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 70.529034] Call Trace: [ 70.531616] dump_stack+0x185/0x1d0 [ 70.535227] panic+0x39d/0x940 [ 70.538412] ? csum_partial_copy_to_user+0x450/0x500 [ 70.543503] kmsan_report+0x238/0x240 [ 70.547297] __msan_warning_32+0x6c/0xb0 [ 70.551342] csum_partial_copy_to_user+0x450/0x500 [ 70.556256] csum_and_copy_to_iter+0x3dc/0x2140 [ 70.560908] ? kmsan_set_origin_inline+0x6b/0x120 [ 70.565730] ? __msan_poison_alloca+0x15c/0x1d0 [ 70.570395] skb_copy_and_csum_datagram+0x6d2/0x1080 [ 70.575486] skb_copy_and_csum_datagram_msg+0x557/0x960 [ 70.580835] udpv6_recvmsg+0xc65/0x29e0 [ 70.584795] ? udp6_lib_lookup_skb+0x240/0x240 [ 70.589364] inet_recvmsg+0x4c2/0x5f0 [ 70.593147] sock_recvmsg+0x1d0/0x230 [ 70.596936] ? inet_sendpage+0x8c0/0x8c0 [ 70.600976] ___sys_recvmsg+0x3fb/0x810 [ 70.604932] ? __fget_light+0x56/0x710 [ 70.608799] ? __fdget+0x4e/0x60 [ 70.612146] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 70.617488] ? __fget_light+0x6b9/0x710 [ 70.621445] SYSC_recvmsg+0x298/0x3c0 [ 70.625229] SyS_recvmsg+0x54/0x80 [ 70.628747] do_syscall_64+0x309/0x430 [ 70.632616] ? ___sys_recvmsg+0x810/0x810 [ 70.636745] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 70.641914] RIP: 0033:0x455319 [ 70.645104] RSP: 002b:00007f50ce18cc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 70.652789] RAX: ffffffffffffffda RBX: 00007f50ce18d6d4 RCX: 0000000000455319 [ 70.660047] RDX: 0000000000000000 RSI: 0000000020000680 RDI: 0000000000000013 [ 70.667297] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 70.674543] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 70.681792] R13: 0000000000000496 R14: 00000000006f9eb0 R15: 0000000000000000 [ 70.689554] Dumping ftrace buffer: [ 70.693094] (ftrace buffer empty) [ 70.696779] Kernel Offset: disabled [ 70.700379] Rebooting in 86400 seconds..