INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.19' (ECDSA) to the list of known hosts. 2018/04/14 16:27:06 fuzzer started 2018/04/14 16:27:06 dialing manager at 10.128.0.26:36243 2018/04/14 16:27:13 kcov=true, comps=false 2018/04/14 16:27:15 executing program 0: 2018/04/14 16:27:15 executing program 1: 2018/04/14 16:27:15 executing program 2: 2018/04/14 16:27:15 executing program 4: 2018/04/14 16:27:15 executing program 7: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x2, @in=@broadcast=0xffffffff, 0x0, 0x3, 0x0, 0x9}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0)={0xa}, 0x6c) 2018/04/14 16:27:15 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e20}, 0x10) 2018/04/14 16:27:15 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f0000bc2000)="81", 0x1, 0x0, &(0x7f0000606fe4)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}, 0x1}, 0x1c) listen(r0, 0x7) r1 = accept4(r0, 0x0, &(0x7f0000004b80), 0x0) sendmmsg(r1, &(0x7f0000006d80)=[{{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000000000)="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", 0x781}], 0x1, &(0x7f0000002180)}}], 0x1, 0x0) 2018/04/14 16:27:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000608ff8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x2, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000640)={{}, {0x0, 0x9}}, &(0x7f0000000200)) request_key(&(0x7f00000003c0)='logon\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a}, &(0x7f0000000440)='*wlan1\x00', 0xfffffffffffffffd) request_key(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={0x73, 0x79, 0x7a}, &(0x7f0000000500)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0xfffffffffffffff8) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000100)={0x2}) syzkaller login: [ 42.223203] ip (3784) used greatest stack depth: 54672 bytes left [ 42.472087] ip (3807) used greatest stack depth: 54312 bytes left [ 43.361135] ip (3897) used greatest stack depth: 54200 bytes left [ 43.805978] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.812529] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.857017] device bridge_slave_0 entered promiscuous mode [ 43.930011] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.936552] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.971147] device bridge_slave_0 entered promiscuous mode [ 43.996910] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.003384] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.029480] device bridge_slave_0 entered promiscuous mode [ 44.039918] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.046365] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.056811] device bridge_slave_0 entered promiscuous mode [ 44.076837] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.083300] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.101593] device bridge_slave_1 entered promiscuous mode [ 44.130269] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.136749] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.156988] device bridge_slave_0 entered promiscuous mode [ 44.172457] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.178915] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.205275] device bridge_slave_0 entered promiscuous mode [ 44.221153] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.227602] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.251150] device bridge_slave_0 entered promiscuous mode [ 44.262452] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.272668] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.279124] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.309425] device bridge_slave_1 entered promiscuous mode [ 44.318652] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.325137] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.342416] device bridge_slave_1 entered promiscuous mode [ 44.348914] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.355452] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.371630] device bridge_slave_1 entered promiscuous mode [ 44.382577] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.389095] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.417308] device bridge_slave_0 entered promiscuous mode [ 44.427614] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.434126] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.451415] device bridge_slave_1 entered promiscuous mode [ 44.460061] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.467419] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.473900] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.495311] device bridge_slave_1 entered promiscuous mode [ 44.512443] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.518947] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.535979] device bridge_slave_1 entered promiscuous mode [ 44.561757] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.578126] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.587696] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.597156] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.605175] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.611706] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.627929] device bridge_slave_1 entered promiscuous mode [ 44.648373] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.750994] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.770378] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.787368] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.812114] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.836377] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.862156] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.889148] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.002202] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.083257] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.379590] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.601008] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.719645] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.790706] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.858728] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.872081] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.890819] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.912299] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.950000] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.026123] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.035855] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.053723] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.073165] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.151235] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.169938] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.244546] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.606785] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.826299] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 46.919184] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.995837] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.020996] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.056232] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.063427] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.087738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.130011] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.140797] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.156636] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.166246] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.173793] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.186068] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.229161] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.323401] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.332773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.346964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.372462] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.382979] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.393592] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.400970] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.413709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.442358] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.458388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.477887] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.487515] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.500466] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.508844] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.515722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.531462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.553430] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.566792] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.590340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.618474] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.626874] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.634868] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.658710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.686134] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.708191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.737889] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.750105] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.765894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.792517] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.811292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.829975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.861190] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.871056] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.881626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.899126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.919577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.940867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.955360] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.965185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.973589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.998923] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.006866] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.015453] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.022575] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.055638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.094171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.136814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.161591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.173110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.705268] ip (4295) used greatest stack depth: 54160 bytes left [ 49.803723] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.810212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.817111] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.827404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.861483] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 49.868344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.884489] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.890933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.897719] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.904141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.912671] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.120412] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.126909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.133757] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.140200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.173747] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.241423] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.247917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.254764] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.261205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.330440] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.348329] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.354812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.361655] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.368141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.408643] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.417646] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.424107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.430963] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.437397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.476950] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.486591] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.493099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.499928] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.506386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.515235] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.526256] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.532722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.539563] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.546014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.591539] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.911582] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.935744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.967636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.982695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.996324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.003446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.011190] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.017709] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.296273] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.584174] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.716344] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.774780] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 59.781122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.788941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.834771] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.854605] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.934197] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.052375] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.058648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.068966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.115920] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.419868] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.426165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.436618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.545433] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.551956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.566083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.687661] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.694005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.705675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.740884] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.749578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.779619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.814231] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.828637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.851650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.889649] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.916462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.929425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/14 16:27:43 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_getres(0x9, &(0x7f0000000cc0)) 2018/04/14 16:27:43 executing program 3: r0 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0) io_setup(0x6, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)}]) 2018/04/14 16:27:43 executing program 5: 2018/04/14 16:27:43 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000094000)=[@in={0x2, 0x0, @loopback=0x7f000001}], 0x10) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) listen(r0, 0x2) accept(r0, &(0x7f0000001540)=ANY=[], &(0x7f0000123000)) listen(r0, 0x0) sendto$inet(r0, &(0x7f00000000c0)="cf", 0x1, 0x0, &(0x7f0000a04000)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) shutdown(r0, 0x1) 2018/04/14 16:27:43 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}}]}, 0x60}, 0x1}, 0x0) 2018/04/14 16:27:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2001}) 2018/04/14 16:27:43 executing program 6: mkdir(&(0x7f000000e000)='./control\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000000c0)='./control\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000040000)='./control\x00', 0x8, 0x0) faccessat(r0, &(0x7f0000000080)='./control\x00', 0x0, 0x0) 2018/04/14 16:27:43 executing program 2: r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000608ff8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x2, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000640)={{}, {0x0, 0x9}}, &(0x7f0000000200)) 2018/04/14 16:27:43 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000002fe4)={0xa}, 0x1c) sendmsg(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000ff0)=[{&(0x7f0000000280)='H\x00', 0x2}], 0x1, &(0x7f0000026000)}, 0x2000c080) write(r0, &(0x7f0000000000)="9701d929e7ed4a96c8eeefad2d47f178c4c20f1ca5fa6664bd526464dd948575c40418328c5aa8372355056a497b", 0x2e) 2018/04/14 16:27:43 executing program 6: perf_event_open(&(0x7f0000000000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000040), 0x4) setsockopt$inet_int(r0, 0x0, 0xc9, &(0x7f0000000000), 0x4) 2018/04/14 16:27:43 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000fd7000)={&(0x7f0000139ff0)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10, &(0x7f000043cfff)=[{&(0x7f0000718f0a)="be", 0x1}], 0x1, &(0x7f000036cfa0)}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f000093eee8)=[{&(0x7f00001f6000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10, &(0x7f0000562000), 0x3e2, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x30}, {&(0x7f0000957ff0)=@in={0x2, 0x0, @multicast2=0xe0000002}, 0xfffffffffffffe70, &(0x7f000093e000), 0x0, &(0x7f000093ef10)=[@sndinfo={0x20, 0x84, 0x2}], 0x30}], 0x2, 0x0) [ 67.469588] ================================================================== [ 67.477013] BUG: KMSAN: uninit-value in rawv6_sendmsg+0x4bee/0x4cc0 [ 67.483436] CPU: 1 PID: 5798 Comm: syz-executor5 Not tainted 4.16.0+ #83 [ 67.490297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 67.499652] Call Trace: [ 67.502254] dump_stack+0x185/0x1d0 [ 67.505892] ? rawv6_sendmsg+0x4bee/0x4cc0 [ 67.510130] kmsan_report+0x142/0x240 [ 67.513937] __msan_warning_32+0x6c/0xb0 [ 67.518001] rawv6_sendmsg+0x4bee/0x4cc0 [ 67.522067] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 67.527523] ? futex_wait_queue_me+0x687/0x710 [ 67.532129] ? compat_rawv6_ioctl+0x30/0x30 [ 67.536459] inet_sendmsg+0x48d/0x740 [ 67.540267] ? security_socket_sendmsg+0x9e/0x210 [ 67.545125] ? inet_getname+0x500/0x500 [ 67.549107] sock_write_iter+0x3b9/0x470 [ 67.553185] ? sock_read_iter+0x480/0x480 [ 67.557343] __vfs_write+0x719/0x910 [ 67.561071] vfs_write+0x463/0x8d0 [ 67.564609] SYSC_write+0x172/0x360 [ 67.568222] SyS_write+0x55/0x80 [ 67.571572] do_syscall_64+0x309/0x430 [ 67.575452] ? SYSC_read+0x360/0x360 [ 67.579162] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 67.584330] RIP: 0033:0x455319 [ 67.587507] RSP: 002b:00007f0adbfc2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 67.595214] RAX: ffffffffffffffda RBX: 00007f0adbfc36d4 RCX: 0000000000455319 [ 67.602472] RDX: 000000000000002e RSI: 0000000020000000 RDI: 0000000000000013 [ 67.609727] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 67.616998] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 67.624261] R13: 00000000000006b6 R14: 00000000006fd1b0 R15: 0000000000000000 [ 67.631518] [ 67.633123] Uninit was stored to memory at: [ 67.637447] kmsan_internal_chain_origin+0x12b/0x210 [ 67.642543] kmsan_memcpy_origins+0x11d/0x170 [ 67.647039] __msan_memcpy+0x19f/0x1f0 [ 67.650920] skb_copy_bits+0x63a/0xdb0 [ 67.654802] rawv6_sendmsg+0x427e/0x4cc0 [ 67.658854] inet_sendmsg+0x48d/0x740 [ 67.662654] sock_write_iter+0x3b9/0x470 [ 67.666714] __vfs_write+0x719/0x910 [ 67.670424] vfs_write+0x463/0x8d0 [ 67.673962] SYSC_write+0x172/0x360 [ 67.677578] SyS_write+0x55/0x80 [ 67.680930] do_syscall_64+0x309/0x430 [ 67.684818] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 67.689994] Uninit was created at: [ 67.693521] kmsan_alloc_meta_for_pages+0x161/0x3a0 [ 67.698521] kmsan_alloc_page+0x82/0xe0 [ 67.702485] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 67.707221] alloc_pages_current+0x6b5/0x970 [ 67.711609] skb_page_frag_refill+0x3ba/0x5e0 [ 67.716092] sk_page_frag_refill+0xa4/0x340 [ 67.720403] __ip6_append_data+0x1a20/0x4bb0 [ 67.724801] ip6_append_data+0x40e/0x6b0 [ 67.728857] rawv6_sendmsg+0x2787/0x4cc0 [ 67.732914] inet_sendmsg+0x48d/0x740 [ 67.736705] sock_write_iter+0x3b9/0x470 [ 67.740760] __vfs_write+0x719/0x910 [ 67.744472] vfs_write+0x463/0x8d0 [ 67.748004] SYSC_write+0x172/0x360 [ 67.751618] SyS_write+0x55/0x80 [ 67.754970] do_syscall_64+0x309/0x430 [ 67.758850] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 67.764035] ================================================================== [ 67.771383] Disabling lock debugging due to kernel taint [ 67.776827] Kernel panic - not syncing: panic_on_warn set ... [ 67.776827] [ 67.784183] CPU: 1 PID: 5798 Comm: syz-executor5 Tainted: G B 4.16.0+ #83 [ 67.792306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 67.801652] Call Trace: [ 67.804245] dump_stack+0x185/0x1d0 [ 67.807862] panic+0x39d/0x940 [ 67.811074] ? rawv6_sendmsg+0x4bee/0x4cc0 [ 67.815311] kmsan_report+0x238/0x240 [ 67.819116] __msan_warning_32+0x6c/0xb0 [ 67.823182] rawv6_sendmsg+0x4bee/0x4cc0 [ 67.827243] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 67.832697] ? futex_wait_queue_me+0x687/0x710 [ 67.837297] ? compat_rawv6_ioctl+0x30/0x30 [ 67.841619] inet_sendmsg+0x48d/0x740 [ 67.845421] ? security_socket_sendmsg+0x9e/0x210 [ 67.850256] ? inet_getname+0x500/0x500 [ 67.854231] sock_write_iter+0x3b9/0x470 [ 67.858303] ? sock_read_iter+0x480/0x480 [ 67.862452] __vfs_write+0x719/0x910 [ 67.866167] vfs_write+0x463/0x8d0 [ 67.869705] SYSC_write+0x172/0x360 [ 67.873327] SyS_write+0x55/0x80 [ 67.876685] do_syscall_64+0x309/0x430 [ 67.880569] ? SYSC_read+0x360/0x360 [ 67.884287] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 67.889468] RIP: 0033:0x455319 [ 67.892644] RSP: 002b:00007f0adbfc2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 67.900336] RAX: ffffffffffffffda RBX: 00007f0adbfc36d4 RCX: 0000000000455319 [ 67.908177] RDX: 000000000000002e RSI: 0000000020000000 RDI: 0000000000000013 [ 67.915432] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 67.922685] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 67.929939] R13: 00000000000006b6 R14: 00000000006fd1b0 R15: 0000000000000000 [ 67.937622] Dumping ftrace buffer: [ 67.941145] (ftrace buffer empty) [ 67.944843] Kernel Offset: disabled [ 67.948455] Rebooting in 86400 seconds..