INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.43' (ECDSA) to the list of known hosts. 2018/04/13 17:23:18 fuzzer started 2018/04/13 17:23:18 dialing manager at 10.128.0.26:33379 2018/04/13 17:23:25 kcov=true, comps=false 2018/04/13 17:23:28 executing program 0: ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x0, 0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200)}) move_pages(0x0, 0x2c9, &(0x7f0000000000), &(0x7f000026bfec), &(0x7f0000002000), 0x0) 2018/04/13 17:23:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000008c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x409, 0x0, 0x0, {0x1}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e20}]}, 0x1c}, 0x1}, 0x0) 2018/04/13 17:23:28 executing program 7: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r1, &(0x7f0000000140), 0x20) r2 = memfd_create(&(0x7f0000000000)='dev ', 0x0) ftruncate(r2, 0x40001) sendfile(r1, r2, &(0x7f0000001000), 0x400000000fee) recvmmsg(r0, &(0x7f0000000800)=[{{&(0x7f00000000c0)=@nfc, 0x0, &(0x7f0000000940)=[{&(0x7f0000000880)=""/123}], 0x0, &(0x7f0000000680)=""/108}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/164}], 0x3c3}, 0x3}], 0x1b1, 0x0, 0x0) 2018/04/13 17:23:28 executing program 2: getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000380)=ANY=[@ANYBLOB="70000000ba59da5ef5847d903de57224fdcdb833d5998518bb5c0d1c520c3006b5edf920a64655e69a623403531f08c308067c155d961e0c010419593c7b738d729bf714e6cdac3993020000000000006c0364"], &(0x7f0000000180)=0x1) perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_ifreq(r0, 0x8924, &(0x7f00000003c0)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/04/13 17:23:28 executing program 4: 2018/04/13 17:23:28 executing program 5: 2018/04/13 17:23:28 executing program 6: 2018/04/13 17:23:28 executing program 3: syzkaller login: [ 45.786290] ip (3764) used greatest stack depth: 54672 bytes left [ 46.058337] ip (3786) used greatest stack depth: 54408 bytes left [ 47.283933] ip (3904) used greatest stack depth: 54200 bytes left [ 47.459957] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.466472] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.528208] device bridge_slave_0 entered promiscuous mode [ 47.647425] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.653948] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.711586] device bridge_slave_1 entered promiscuous mode [ 47.738288] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.744794] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.786558] device bridge_slave_0 entered promiscuous mode [ 47.842326] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.848871] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.888115] device bridge_slave_0 entered promiscuous mode [ 47.908312] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.914834] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.940214] device bridge_slave_0 entered promiscuous mode [ 47.957010] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.969196] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.975751] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.012088] device bridge_slave_1 entered promiscuous mode [ 48.030086] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.036593] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.057128] device bridge_slave_0 entered promiscuous mode [ 48.071954] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.078854] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.095134] device bridge_slave_0 entered promiscuous mode [ 48.106104] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.112650] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.135494] device bridge_slave_1 entered promiscuous mode [ 48.156762] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.163328] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.173702] device bridge_slave_0 entered promiscuous mode [ 48.183643] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.190112] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.224019] device bridge_slave_0 entered promiscuous mode [ 48.238315] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 48.246579] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.262375] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.268859] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.298317] device bridge_slave_1 entered promiscuous mode [ 48.317435] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.324006] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.353971] device bridge_slave_1 entered promiscuous mode [ 48.361209] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 48.369582] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.376135] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.412145] device bridge_slave_1 entered promiscuous mode [ 48.436451] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.446762] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.453271] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.493973] device bridge_slave_1 entered promiscuous mode [ 48.501838] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.508335] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.531517] device bridge_slave_1 entered promiscuous mode [ 48.542790] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 48.551487] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.559852] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 48.578166] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 48.703592] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 48.758877] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.769227] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.793161] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 48.813473] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.926530] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 49.041527] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 49.182719] ip (4032) used greatest stack depth: 53960 bytes left [ 49.279852] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 49.456761] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 49.531205] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.541913] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 49.632272] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.725143] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 49.737299] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.816114] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 49.852269] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 49.935240] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.944972] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 50.028745] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 50.036973] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 50.130885] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 50.186094] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 50.243208] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 50.632355] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.656737] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.756763] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.864860] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.882668] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.934676] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.981507] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 51.048013] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 51.107484] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.114707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.127776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.147558] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.157129] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.173117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.203966] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 51.216329] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.228821] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.240103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.272624] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 51.280561] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 51.300752] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.312104] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.329891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.358628] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 51.374388] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 51.405986] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.413286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.426466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.454977] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 51.465839] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.473115] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.488093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.534851] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.542830] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.574138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.605469] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 51.618872] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.632378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.647800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.685078] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.699548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.711813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.749722] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 51.761728] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.771485] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.798435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.839789] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.847095] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.868915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.891329] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.898819] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.907711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.937186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.965842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.988841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.031890] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.039203] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.047793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.152748] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.159983] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.173997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.257976] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.265907] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.289972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.873581] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.880149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.887068] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.893543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.933691] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.940546] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.992981] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.999522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.006467] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.012989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.096818] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.147456] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.153966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.161326] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.167804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.178111] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.243914] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.250443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.257354] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.263840] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.329389] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.392578] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.399146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.406134] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.412642] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.470489] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.477791] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.484293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.491221] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.497726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.538707] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.561937] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.568456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.575377] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.581877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.657069] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.755517] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.762111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.769084] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.775589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.863192] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.944180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.958186] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.998776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.029471] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.066705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.078217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.087378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.865285] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 64.008803] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 64.198134] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 64.206967] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 64.234103] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 64.272383] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 64.616414] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 64.627357] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 64.747438] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 64.753735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.764847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.908775] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 64.915848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.926194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.997375] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 65.003740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.016565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.048679] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 65.055091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.067237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.099358] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 65.105652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.122419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.183521] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 65.189913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.214817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.536984] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 65.543556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.556729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.612066] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 65.620393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.632192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/13 17:23:55 executing program 4: 2018/04/13 17:23:55 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000982000)={0x10, 0x108000000000004, 0x4, 0x1}, 0x2c) bpf$MAP_CREATE(0x4, &(0x7f0000003000)={0x13, 0x0, 0x800001}, 0x2c) [ 72.113929] ================================================================== [ 72.121324] BUG: KMSAN: uninit-value in _copy_to_iter+0x1bb3/0x28f0 [ 72.127712] CPU: 0 PID: 5773 Comm: syz-executor7 Not tainted 4.16.0+ #83 [ 72.134525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 72.143862] Call Trace: [ 72.146438] dump_stack+0x185/0x1d0 [ 72.150069] ? kmsan_internal_check_memory+0x145/0x1d0 [ 72.155360] kmsan_report+0x142/0x240 [ 72.159173] kmsan_internal_check_memory+0x164/0x1d0 [ 72.164285] kmsan_copy_to_user+0x69/0x160 [ 72.168507] ? skb_copy_datagram_iter+0x443/0xf70 [ 72.173332] _copy_to_iter+0x1bb3/0x28f0 [ 72.177408] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 72.182855] ? __skb_try_recv_from_queue+0xc74/0xe80 [ 72.187959] skb_copy_datagram_iter+0x443/0xf70 [ 72.192632] unix_dgram_recvmsg+0xc3f/0x1940 [ 72.197035] sock_recvmsg_nosec+0x109/0x140 [ 72.201351] ? unix_dgram_sendmsg+0x3610/0x3610 [ 72.206018] ___sys_recvmsg+0x3fb/0x810 [ 72.209976] ? __msan_poison_alloca+0x15c/0x1d0 [ 72.214628] ? _cond_resched+0x3c/0xd0 [ 72.218507] ? rcu_all_qs+0x32/0x1f0 [ 72.222200] ? _cond_resched+0x3c/0xd0 [ 72.226068] ? __sys_recvmmsg+0x908/0xdb0 [ 72.230199] ? rcu_all_qs+0x32/0x1f0 [ 72.233895] __sys_recvmmsg+0x54e/0xdb0 [ 72.237859] ? __msan_poison_alloca+0x15c/0x1d0 [ 72.242604] SYSC_recvmmsg+0x212/0x3e0 [ 72.246478] ? SYSC_ioctl+0x233/0x260 [ 72.250264] SyS_recvmmsg+0x76/0xa0 [ 72.253879] do_syscall_64+0x309/0x430 [ 72.257754] ? __sys_recvmmsg+0xdb0/0xdb0 [ 72.261896] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 72.267069] RIP: 0033:0x455319 [ 72.270241] RSP: 002b:00007f165811ec68 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 72.277940] RAX: ffffffffffffffda RBX: 00007f165811f6d4 RCX: 0000000000455319 [ 72.285194] RDX: 00000000000001b1 RSI: 0000000020000800 RDI: 0000000000000013 [ 72.292449] RBP: 000000000072bf58 R08: 0000000000000000 R09: 0000000000000000 [ 72.299807] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 72.307063] R13: 0000000000000495 R14: 00000000006f9e98 R15: 0000000000000001 [ 72.314334] [ 72.315950] Uninit was stored to memory at: [ 72.320262] kmsan_internal_chain_origin+0x12b/0x210 [ 72.325352] kmsan_memcpy_origins+0x11d/0x170 [ 72.329835] __msan_memcpy+0x19f/0x1f0 [ 72.333708] _copy_from_iter+0xefb/0x1d40 [ 72.337841] skb_copy_datagram_from_iter+0x1ff/0xcc0 [ 72.343026] unix_dgram_sendmsg+0xdce/0x3610 [ 72.347425] kernel_sendmsg+0x228/0x2d0 [ 72.351396] sock_no_sendpage+0x1c8/0x250 [ 72.355797] sock_sendpage+0x1de/0x2c0 [ 72.359693] pipe_to_sendpage+0x31b/0x430 [ 72.363831] __splice_from_pipe+0x49a/0xf30 [ 72.368144] generic_splice_sendpage+0x1c6/0x2a0 [ 72.373066] direct_splice_actor+0x19b/0x200 [ 72.377470] splice_direct_to_actor+0x764/0x1040 [ 72.382215] do_splice_direct+0x335/0x540 [ 72.386352] do_sendfile+0x1067/0x1e40 [ 72.390316] SYSC_sendfile64+0x1b3/0x300 [ 72.394371] SyS_sendfile64+0x64/0x90 [ 72.398157] do_syscall_64+0x309/0x430 [ 72.402042] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 72.407211] Uninit was created at: [ 72.410738] kmsan_alloc_meta_for_pages+0x161/0x3a0 [ 72.415737] kmsan_alloc_page+0x82/0xe0 [ 72.419701] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 72.424446] alloc_pages_vma+0xcc8/0x1800 [ 72.428588] shmem_alloc_and_acct_page+0x6d5/0x1000 [ 72.433859] shmem_getpage_gfp+0x35db/0x5770 [ 72.438351] shmem_file_read_iter+0x508/0x1180 [ 72.442927] generic_file_splice_read+0x4e8/0x830 [ 72.447757] splice_direct_to_actor+0x4c6/0x1040 [ 72.452500] do_splice_direct+0x335/0x540 [ 72.456633] do_sendfile+0x1067/0x1e40 [ 72.460511] SYSC_sendfile64+0x1b3/0x300 [ 72.464556] SyS_sendfile64+0x64/0x90 [ 72.468358] do_syscall_64+0x309/0x430 [ 72.472265] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 72.477429] [ 72.479037] Bytes 0-962 of 963 are uninitialized [ 72.483772] ================================================================== [ 72.491123] Disabling lock debugging due to kernel taint [ 72.496554] Kernel panic - not syncing: panic_on_warn set ... [ 72.496554] [ 72.503907] CPU: 0 PID: 5773 Comm: syz-executor7 Tainted: G B 4.16.0+ #83 [ 72.512030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 72.521367] Call Trace: [ 72.523957] dump_stack+0x185/0x1d0 [ 72.527569] panic+0x39d/0x940 [ 72.530762] ? kmsan_internal_check_memory+0x145/0x1d0 [ 72.536024] kmsan_report+0x238/0x240 [ 72.539817] kmsan_internal_check_memory+0x164/0x1d0 [ 72.544902] kmsan_copy_to_user+0x69/0x160 [ 72.549211] ? skb_copy_datagram_iter+0x443/0xf70 [ 72.554042] _copy_to_iter+0x1bb3/0x28f0 [ 72.558091] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 72.563533] ? __skb_try_recv_from_queue+0xc74/0xe80 [ 72.568633] skb_copy_datagram_iter+0x443/0xf70 [ 72.573297] unix_dgram_recvmsg+0xc3f/0x1940 [ 72.577699] sock_recvmsg_nosec+0x109/0x140 [ 72.582015] ? unix_dgram_sendmsg+0x3610/0x3610 [ 72.586679] ___sys_recvmsg+0x3fb/0x810 [ 72.590648] ? __msan_poison_alloca+0x15c/0x1d0 [ 72.595303] ? _cond_resched+0x3c/0xd0 [ 72.599188] ? rcu_all_qs+0x32/0x1f0 [ 72.602885] ? _cond_resched+0x3c/0xd0 [ 72.606760] ? __sys_recvmmsg+0x908/0xdb0 [ 72.610895] ? rcu_all_qs+0x32/0x1f0 [ 72.614596] __sys_recvmmsg+0x54e/0xdb0 [ 72.618557] ? __msan_poison_alloca+0x15c/0x1d0 [ 72.623217] SYSC_recvmmsg+0x212/0x3e0 [ 72.627093] ? SYSC_ioctl+0x233/0x260 [ 72.630887] SyS_recvmmsg+0x76/0xa0 [ 72.634503] do_syscall_64+0x309/0x430 [ 72.638385] ? __sys_recvmmsg+0xdb0/0xdb0 [ 72.642518] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 72.647690] RIP: 0033:0x455319 [ 72.650863] RSP: 002b:00007f165811ec68 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 72.658553] RAX: ffffffffffffffda RBX: 00007f165811f6d4 RCX: 0000000000455319 [ 72.665805] RDX: 00000000000001b1 RSI: 0000000020000800 RDI: 0000000000000013 [ 72.673056] RBP: 000000000072bf58 R08: 0000000000000000 R09: 0000000000000000 [ 72.680310] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 72.687565] R13: 0000000000000495 R14: 00000000006f9e98 R15: 0000000000000001 [ 72.695282] Dumping ftrace buffer: [ 72.698807] (ftrace buffer empty) [ 72.702493] Kernel Offset: disabled [ 72.706103] Rebooting in 86400 seconds..