INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.11' (ECDSA) to the list of known hosts. 2018/04/20 20:29:18 fuzzer started 2018/04/20 20:29:19 dialing manager at 10.128.0.26:40315 2018/04/20 20:29:25 kcov=true, comps=false 2018/04/20 20:29:28 executing program 0: syz_emit_ethernet(0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd600104000000010000778501dc800b910d06cea00d00000000000000000000ffff0000211a21f0000000fe80000000000000000000000000"], &(0x7f0000000080)) 2018/04/20 20:29:28 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x9) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000040), 0x135, 0x0, &(0x7f0000008000)={0xa, 0x0, 0xb, @loopback={0x0, 0x1}}, 0x1c) 2018/04/20 20:29:28 executing program 7: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000080)=0x802) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)={0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 2018/04/20 20:29:28 executing program 4: 2018/04/20 20:29:28 executing program 2: 2018/04/20 20:29:28 executing program 3: 2018/04/20 20:29:28 executing program 5: 2018/04/20 20:29:28 executing program 6: syzkaller login: [ 44.802680] ip (3755) used greatest stack depth: 54688 bytes left [ 45.324918] ip (3799) used greatest stack depth: 54672 bytes left [ 45.507090] ip (3816) used greatest stack depth: 54072 bytes left [ 46.644707] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.651221] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.707223] device bridge_slave_0 entered promiscuous mode [ 46.768982] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.775540] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.811166] device bridge_slave_0 entered promiscuous mode [ 46.826633] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.833155] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.849953] device bridge_slave_0 entered promiscuous mode [ 46.877185] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.883762] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.908165] device bridge_slave_0 entered promiscuous mode [ 46.930686] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.937212] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.971284] device bridge_slave_1 entered promiscuous mode [ 47.002005] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.008557] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.048560] device bridge_slave_0 entered promiscuous mode [ 47.064164] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.070655] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.087442] device bridge_slave_1 entered promiscuous mode [ 47.096115] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.102602] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.121969] device bridge_slave_1 entered promiscuous mode [ 47.133074] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.139542] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.163178] device bridge_slave_0 entered promiscuous mode [ 47.181694] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.188207] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.203097] device bridge_slave_1 entered promiscuous mode [ 47.215362] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.224686] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.231169] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.244398] device bridge_slave_0 entered promiscuous mode [ 47.259432] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.270771] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.278829] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.285366] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.320252] device bridge_slave_1 entered promiscuous mode [ 47.327749] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.334232] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.355528] device bridge_slave_1 entered promiscuous mode [ 47.373346] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.379887] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.410849] device bridge_slave_0 entered promiscuous mode [ 47.435624] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.452056] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.461622] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.469815] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.476318] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.525149] device bridge_slave_1 entered promiscuous mode [ 47.544875] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.552625] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.562293] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.636570] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.647521] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.654078] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.699403] device bridge_slave_1 entered promiscuous mode [ 47.721742] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.733402] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.793954] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.911099] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.929425] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 48.162512] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.409180] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.428386] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.586877] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.599298] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.668411] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.683340] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.722591] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.808983] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.842842] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.915476] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.940068] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.953101] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 49.045470] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.176092] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.183727] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 49.403629] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.637787] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.688921] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.852793] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.872350] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.912330] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.920011] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.946953] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.036803] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.078790] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.087311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.105932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.146139] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.159465] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.169170] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.177404] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.185636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.196092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.241515] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.249375] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.269465] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.283194] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.298877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.335669] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.342996] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.374871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.425432] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.433163] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.448392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.470917] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.479131] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.492825] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.500405] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.508170] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.529759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.563701] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.593070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.613517] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.622064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.643796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.655340] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.669801] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.680402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.702905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.750443] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.761263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.774775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.802410] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.811598] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.819541] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.840949] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.870507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.905940] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.928824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.951699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.974436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.994296] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.014208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.039269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.077401] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.089114] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.109988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.165249] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.172862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.187861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.747725] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.754237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.761160] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.767633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.832175] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.838978] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.885230] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.891744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.898618] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.905227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.998588] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.048180] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.054678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.061656] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.068144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.114821] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.130636] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.137124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.143991] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.150470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.163167] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.192166] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.198646] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.205524] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.211996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.309946] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.374064] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.380563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.387405] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.393867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.467129] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.642089] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.648592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.655467] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.661921] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.682269] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.702195] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.708684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.715566] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.722107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.796936] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.856362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.875268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.905150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.931684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.950931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.973640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.981250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.233433] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.349266] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.452408] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.628339] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.991183] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 63.062120] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 63.069758] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.076097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.087695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.127812] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.136193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.149958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.342731] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.349085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.365214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.413528] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 63.429449] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.435940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.448594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.496281] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 63.864642] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.870893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.888485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.927892] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.940940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.971379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.205516] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 64.213438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.231370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.301967] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 64.315561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.326635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/20 20:29:55 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6}, 0x14) sendto$inet(r0, &(0x7f00000000c0), 0x0, 0x809802, &(0x7f0000653ff0)={0x2, 0x4e20}, 0x10) sendmmsg(r0, &(0x7f0000001b40)=[{{&(0x7f00000002c0)=@nl=@unspec, 0xc, &(0x7f0000000400), 0x1e1, &(0x7f0000000440)}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000500), 0xfea8}], 0x9d, &(0x7f0000000200), 0x15d}}], 0x2, 0x0) 2018/04/20 20:29:55 executing program 2: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0x0, 0x0}) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x32}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0xffffffffffffffcc, &(0x7f0000001300)=""/251}, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet(0x16, 0x80, 0x0, &(0x7f0000000080)) socketpair$inet(0x16, 0x0, 0x0, &(0x7f0000000080)) 2018/04/20 20:29:55 executing program 7: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) recvmsg(r0, &(0x7f00000000c0)={&(0x7f0000fb9000)=@sco, 0x80, &(0x7f0000e9c000)=[{&(0x7f0000000300)=""/219, 0xfffffd54}, {&(0x7f0000000400)=""/43, 0x2b}, {&(0x7f0000000440)=""/54, 0x36}, {&(0x7f0000466000)=""/4096, 0x1000}, {&(0x7f0000000000)=""/142, 0x8e}, {&(0x7f0000ba9fd5)=""/43, 0x2b}, {&(0x7f0000820000)=""/185, 0xb9}, {&(0x7f0000000480)=""/243, 0xf3}, {&(0x7f00001b1ffd)=""/53, 0x35}], 0x9, &(0x7f0000000180)=""/81, 0x51}, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) 2018/04/20 20:29:55 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/20 20:29:55 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000d81ff8)=0x101) r0 = eventfd(0x8000000001fc) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffff90, 0x8) write$eventfd(r0, &(0x7f0000000040), 0x8) 2018/04/20 20:29:55 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)={0x0, 0x6}) 2018/04/20 20:29:55 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x5, 0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)={@random="cd390b081bf2", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x3a, 0x0, @mcast2={0xff, 0x2, [], 0x1}, @dev={0xfe, 0x80}, [], "802a08000000006b"}}}}}}}, 0x0) 2018/04/20 20:29:55 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3ffffffffffffffd, 0x44031, 0xffffffffffffffff, 0x0) syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) [ 69.843779] ================================================================== [ 69.851223] BUG: KMSAN: uninit-value in csum_partial+0x78e/0x850 [ 69.857372] CPU: 0 PID: 5767 Comm: syz-executor0 Not tainted 4.16.0+ #84 [ 69.864202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.873548] Call Trace: [ 69.876115] [ 69.878263] dump_stack+0x185/0x1d0 [ 69.881876] ? csum_partial+0x78e/0x850 [ 69.885832] kmsan_report+0x142/0x240 [ 69.889623] __msan_warning_32+0x6c/0xb0 [ 69.893675] csum_partial+0x78e/0x850 [ 69.897467] csum_partial_ext+0x89/0xa0 [ 69.901539] __skb_checksum+0x6d4/0x1010 [ 69.905590] ? skb_checksum+0x120/0x120 [ 69.909549] skb_checksum+0xec/0x120 [ 69.913256] ? skb_checksum+0x120/0x120 [ 69.917213] ? csum_partial_ext+0xa0/0xa0 [ 69.921357] __skb_checksum_complete+0x90/0x400 [ 69.926015] __udp4_lib_rcv+0x3156/0x4740 [ 69.930335] udp_rcv+0x5c/0x70 [ 69.933509] ? udp_v4_early_demux+0x1cd0/0x1cd0 [ 69.938163] ip_local_deliver_finish+0x6ed/0xd40 [ 69.942916] ip_local_deliver+0x43c/0x4e0 [ 69.947139] ? ip_local_deliver+0x4e0/0x4e0 [ 69.951453] ? ip_call_ra_chain+0x7b0/0x7b0 [ 69.955755] ip_rcv_finish+0x1253/0x16d0 [ 69.959802] ip_rcv+0x119d/0x16f0 [ 69.963236] ? ip_rcv+0x16f0/0x16f0 [ 69.966854] __netif_receive_skb_core+0x47cf/0x4a80 [ 69.971852] ? kmsan_set_origin_inline+0x6b/0x120 [ 69.976685] ? kmsan_internal_memset_shadow_inline+0xc0/0xd0 [ 69.982471] ? ip_local_deliver_finish+0xd40/0xd40 [ 69.987385] process_backlog+0x62d/0xe20 [ 69.991436] ? rps_trigger_softirq+0x2f0/0x2f0 [ 69.996000] net_rx_action+0x7c1/0x1a70 [ 69.999964] ? net_tx_action+0xab0/0xab0 [ 70.004017] __do_softirq+0x56d/0x93d [ 70.007808] do_softirq_own_stack+0x2a/0x40 [ 70.012105] [ 70.014335] __local_bh_enable_ip+0x114/0x140 [ 70.018815] local_bh_enable+0x36/0x40 [ 70.022686] ip_finish_output2+0x124e/0x1380 [ 70.027081] ip_finish_output+0xcb0/0xff0 [ 70.031214] ip_output+0x502/0x5c0 [ 70.034736] ? ip_mc_finish_output+0x3b0/0x3b0 [ 70.039327] ? ip_finish_output+0xff0/0xff0 [ 70.043638] ip_send_skb+0x5f3/0x820 [ 70.047343] ? __ip_local_out+0x5b0/0x5b0 [ 70.051481] udp_send_skb+0xe97/0x1320 [ 70.055359] udp_sendmsg+0xa24/0x3180 [ 70.059146] ? rw_copy_check_uvector+0x5af/0x6c0 [ 70.063886] ? ip_copy_metadata+0xac0/0xac0 [ 70.068196] ? rw_copy_check_uvector+0x643/0x6c0 [ 70.072946] ? udp_send_skb+0x1320/0x1320 [ 70.077081] inet_sendmsg+0x48d/0x740 [ 70.080866] ? security_socket_sendmsg+0x9e/0x210 [ 70.085786] ? inet_getname+0x500/0x500 [ 70.089744] ___sys_sendmsg+0xec0/0x1310 [ 70.093811] ? __fdget+0x4e/0x60 [ 70.097173] ? __fget_light+0x56/0x710 [ 70.101047] ? __fdget+0x4e/0x60 [ 70.104396] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 70.109760] ? __fget_light+0x6b9/0x710 [ 70.113730] __sys_sendmmsg+0x42d/0x800 [ 70.117693] ? __msan_poison_alloca+0x15c/0x1d0 [ 70.122365] ? syscall_return_slowpath+0xe9/0x700 [ 70.127195] ? prepare_exit_to_usermode+0x4a/0x3a0 [ 70.132120] SYSC_sendmmsg+0xc4/0x110 [ 70.135920] SyS_sendmmsg+0x63/0x90 [ 70.139533] do_syscall_64+0x309/0x430 [ 70.143408] ? __sys_sendmmsg+0x800/0x800 [ 70.147544] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 70.152716] RIP: 0033:0x455379 [ 70.155886] RSP: 002b:00007f7870c0ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 70.163579] RAX: ffffffffffffffda RBX: 00007f7870c0f6d4 RCX: 0000000000455379 [ 70.171228] RDX: 0000000000000002 RSI: 0000000020001b40 RDI: 0000000000000013 [ 70.178481] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 70.185734] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 70.192991] R13: 00000000000004d0 R14: 00000000006fa420 R15: 0000000000000000 [ 70.200251] [ 70.201856] Uninit was created at: [ 70.205380] kmsan_alloc_meta_for_pages+0x161/0x3a0 [ 70.210385] kmsan_alloc_page+0x82/0xe0 [ 70.214352] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 70.219092] alloc_pages_current+0x6b5/0x970 [ 70.223482] skb_page_frag_refill+0x3ba/0x5e0 [ 70.228226] sk_page_frag_refill+0xa4/0x340 [ 70.232532] __ip_append_data+0x107e/0x3d10 [ 70.236835] ip_append_data+0x2fb/0x440 [ 70.240794] udp_sendmsg+0x746/0x3180 [ 70.244586] inet_sendmsg+0x48d/0x740 [ 70.248372] ___sys_sendmsg+0xec0/0x1310 [ 70.252423] __sys_sendmmsg+0x42d/0x800 [ 70.256379] SYSC_sendmmsg+0xc4/0x110 [ 70.260163] SyS_sendmmsg+0x63/0x90 [ 70.263774] do_syscall_64+0x309/0x430 [ 70.267646] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 70.272968] ================================================================== [ 70.280304] Disabling lock debugging due to kernel taint [ 70.285731] Kernel panic - not syncing: panic_on_warn set ... [ 70.285731] [ 70.293079] CPU: 0 PID: 5767 Comm: syz-executor0 Tainted: G B 4.16.0+ #84 [ 70.301200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 70.310535] Call Trace: [ 70.313103] [ 70.315241] dump_stack+0x185/0x1d0 [ 70.318856] panic+0x39d/0x940 [ 70.322051] ? csum_partial+0x78e/0x850 [ 70.326020] kmsan_report+0x238/0x240 [ 70.329811] __msan_warning_32+0x6c/0xb0 [ 70.333856] csum_partial+0x78e/0x850 [ 70.337643] csum_partial_ext+0x89/0xa0 [ 70.341601] __skb_checksum+0x6d4/0x1010 [ 70.345655] ? skb_checksum+0x120/0x120 [ 70.349613] skb_checksum+0xec/0x120 [ 70.353317] ? skb_checksum+0x120/0x120 [ 70.357271] ? csum_partial_ext+0xa0/0xa0 [ 70.361409] __skb_checksum_complete+0x90/0x400 [ 70.366063] __udp4_lib_rcv+0x3156/0x4740 [ 70.370204] udp_rcv+0x5c/0x70 [ 70.373377] ? udp_v4_early_demux+0x1cd0/0x1cd0 [ 70.378034] ip_local_deliver_finish+0x6ed/0xd40 [ 70.382774] ip_local_deliver+0x43c/0x4e0 [ 70.386913] ? ip_local_deliver+0x4e0/0x4e0 [ 70.391220] ? ip_call_ra_chain+0x7b0/0x7b0 [ 70.395526] ip_rcv_finish+0x1253/0x16d0 [ 70.399574] ip_rcv+0x119d/0x16f0 [ 70.403013] ? ip_rcv+0x16f0/0x16f0 [ 70.406637] __netif_receive_skb_core+0x47cf/0x4a80 [ 70.411639] ? kmsan_set_origin_inline+0x6b/0x120 [ 70.416472] ? kmsan_internal_memset_shadow_inline+0xc0/0xd0 [ 70.422256] ? ip_local_deliver_finish+0xd40/0xd40 [ 70.427179] process_backlog+0x62d/0xe20 [ 70.431231] ? rps_trigger_softirq+0x2f0/0x2f0 [ 70.435803] net_rx_action+0x7c1/0x1a70 [ 70.439765] ? net_tx_action+0xab0/0xab0 [ 70.443809] __do_softirq+0x56d/0x93d [ 70.447602] do_softirq_own_stack+0x2a/0x40 [ 70.451900] [ 70.454127] __local_bh_enable_ip+0x114/0x140 [ 70.458606] local_bh_enable+0x36/0x40 [ 70.462474] ip_finish_output2+0x124e/0x1380 [ 70.466871] ip_finish_output+0xcb0/0xff0 [ 70.471006] ip_output+0x502/0x5c0 [ 70.474534] ? ip_mc_finish_output+0x3b0/0x3b0 [ 70.479100] ? ip_finish_output+0xff0/0xff0 [ 70.483404] ip_send_skb+0x5f3/0x820 [ 70.487099] ? __ip_local_out+0x5b0/0x5b0 [ 70.491244] udp_send_skb+0xe97/0x1320 [ 70.495121] udp_sendmsg+0xa24/0x3180 [ 70.498910] ? rw_copy_check_uvector+0x5af/0x6c0 [ 70.503646] ? ip_copy_metadata+0xac0/0xac0 [ 70.507951] ? rw_copy_check_uvector+0x643/0x6c0 [ 70.512703] ? udp_send_skb+0x1320/0x1320 [ 70.516836] inet_sendmsg+0x48d/0x740 [ 70.520620] ? security_socket_sendmsg+0x9e/0x210 [ 70.525445] ? inet_getname+0x500/0x500 [ 70.529404] ___sys_sendmsg+0xec0/0x1310 [ 70.533452] ? __fdget+0x4e/0x60 [ 70.536804] ? __fget_light+0x56/0x710 [ 70.540672] ? __fdget+0x4e/0x60 [ 70.544032] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 70.549379] ? __fget_light+0x6b9/0x710 [ 70.553341] __sys_sendmmsg+0x42d/0x800 [ 70.557305] ? __msan_poison_alloca+0x15c/0x1d0 [ 70.561958] ? syscall_return_slowpath+0xe9/0x700 [ 70.566793] ? prepare_exit_to_usermode+0x4a/0x3a0 [ 70.571711] SYSC_sendmmsg+0xc4/0x110 [ 70.575497] SyS_sendmmsg+0x63/0x90 [ 70.579106] do_syscall_64+0x309/0x430 [ 70.582985] ? __sys_sendmmsg+0x800/0x800 [ 70.587123] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 70.592295] RIP: 0033:0x455379 [ 70.595470] RSP: 002b:00007f7870c0ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 70.603160] RAX: ffffffffffffffda RBX: 00007f7870c0f6d4 RCX: 0000000000455379 [ 70.610412] RDX: 0000000000000002 RSI: 0000000020001b40 RDI: 0000000000000013 [ 70.617664] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 70.624925] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 70.632192] R13: 00000000000004d0 R14: 00000000006fa420 R15: 0000000000000000 [ 70.639976] Dumping ftrace buffer: [ 70.643497] (ftrace buffer empty) [ 70.647182] Kernel Offset: disabled [ 70.650784] Rebooting in 86400 seconds..