INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.14' (ECDSA) to the list of known hosts. 2018/04/16 20:31:44 fuzzer started 2018/04/16 20:31:44 dialing manager at 10.128.0.26:41213 2018/04/16 20:31:51 kcov=true, comps=false 2018/04/16 20:31:54 executing program 0: 2018/04/16 20:31:54 executing program 1: 2018/04/16 20:31:54 executing program 7: 2018/04/16 20:31:54 executing program 4: 2018/04/16 20:31:54 executing program 5: 2018/04/16 20:31:54 executing program 6: syz_emit_ethernet(0x2a, &(0x7f000037c000)={@link_local={0x1, 0x80, 0xc2}, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 2018/04/16 20:31:54 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff0ffc)=0x8000000000004, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000ff5ffc)={0x0, 0x3}, 0x4) r2 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000865000), 0xebce, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) 2018/04/16 20:31:54 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000943000)='keyring\x00', &(0x7f0000f02ffb)={0x73, 0x79, 0x7a}, &(0x7f00004defd8), 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) keyctl$revoke(0x3, r0) syzkaller login: [ 44.410573] ip (3731) used greatest stack depth: 54672 bytes left [ 44.510446] ip (3743) used greatest stack depth: 54648 bytes left [ 45.387540] ip (3832) used greatest stack depth: 53960 bytes left [ 45.937588] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.944130] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.003429] device bridge_slave_0 entered promiscuous mode [ 46.037660] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.044143] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.078821] device bridge_slave_0 entered promiscuous mode [ 46.097574] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.104147] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.117733] device bridge_slave_0 entered promiscuous mode [ 46.132672] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.139168] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.158433] device bridge_slave_0 entered promiscuous mode [ 46.173768] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.180285] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.191016] device bridge_slave_0 entered promiscuous mode [ 46.201697] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.208235] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.228673] device bridge_slave_0 entered promiscuous mode [ 46.250830] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.257332] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.278962] device bridge_slave_0 entered promiscuous mode [ 46.293376] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.299865] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.324618] device bridge_slave_1 entered promiscuous mode [ 46.341803] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.348298] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.377184] device bridge_slave_1 entered promiscuous mode [ 46.391962] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.398453] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.417284] device bridge_slave_1 entered promiscuous mode [ 46.428773] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.435243] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.463574] device bridge_slave_1 entered promiscuous mode [ 46.478470] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.484968] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.506091] device bridge_slave_1 entered promiscuous mode [ 46.514938] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.521456] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.545987] device bridge_slave_1 entered promiscuous mode [ 46.559798] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.566349] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.576995] device bridge_slave_0 entered promiscuous mode [ 46.587278] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.594744] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.601247] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.624104] device bridge_slave_1 entered promiscuous mode [ 46.647783] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.657587] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.667811] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.675431] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.681931] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.701802] device bridge_slave_1 entered promiscuous mode [ 46.720671] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.739247] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.748171] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.859623] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.893549] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.901494] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.910590] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.919928] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.927695] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.992855] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.076389] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.118502] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.725130] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.892195] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.923516] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.937124] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.962174] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.986592] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.993931] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.072922] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.098993] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.120277] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.128668] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.148382] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.170831] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.251725] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.287073] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.345914] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.648407] ip (4062) used greatest stack depth: 53656 bytes left [ 49.042077] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.113197] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.136925] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.155071] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.166725] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.238519] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.276696] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.292538] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.322943] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.347654] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.371775] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.381798] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.393849] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.475100] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.506444] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.517152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.540794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.569800] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.577125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.589801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.612971] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.621177] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.629920] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.639262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.664824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.703402] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.712232] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.723369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.753794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.772660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.790473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.807586] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.818970] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.832593] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.839865] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.856422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.873765] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.893448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.908347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.924225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.934781] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.943088] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.961411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.974385] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.982196] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.989468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.018572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.037078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.055849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.068976] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.076926] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.091635] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.108477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.126098] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.141848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.162966] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.173416] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.191929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.220804] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.236146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.246877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.287867] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.295802] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.314490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.191320] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.197836] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.205219] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.213566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.278804] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.285383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.322775] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.329294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.336220] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.342732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.388111] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.400747] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.407275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.414217] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.420723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.478831] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.492223] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.498712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.505627] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.512153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.528232] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.537622] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.544134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.551010] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.557508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.574792] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.599399] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.605907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.612816] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.619288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.694975] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.755702] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.762223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.769148] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.775638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.829089] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.906304] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.912820] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.919732] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.926239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.951913] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.344219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.357325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.382974] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.403162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.418930] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.432693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.440506] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.932801] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.975526] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.082566] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.211582] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.254216] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.277951] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.628111] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.705181] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.711516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.718947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.746657] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.775142] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.781445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.795348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.861199] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.867526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.882232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.976092] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.982641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.991896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.095519] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.101900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.113879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.160135] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.170145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.185742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.553959] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.560310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.574126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.634148] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.640422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.655999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.955520] IPv4: Oversized IP packet from 127.0.0.1 2018/04/16 20:32:22 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e13000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00001d3000)=0x1, 0x4) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x401) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) recvfrom$inet(r0, &(0x7f0000000300)=""/164, 0xa4, 0x0, &(0x7f00000002c0)={0x2, 0x0, @rand_addr}, 0x10) creat(&(0x7f0000000140)='./file0\x00', 0x4) sendto$inet(r0, &(0x7f0000000180)="11", 0x1, 0x4000080, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x50840, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000100)) 2018/04/16 20:32:22 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000943000)='keyring\x00', &(0x7f0000f02ffb)={0x73, 0x79, 0x7a}, &(0x7f00004defd8), 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) keyctl$revoke(0x3, r0) 2018/04/16 20:32:22 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000289fa8)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ad5664a3239dafb6c5820faeb995298992ea54c7beef9f5d", 0x18) r2 = accept$alg(r0, 0x0, 0x0) io_setup(0x1, &(0x7f0000e4b000)=0x0) sendmsg$alg(r2, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000000)="f9e3a127be1d0953084fab7d2701417e1d4a010731", 0x15}], 0x1, &(0x7f00000000c0)}, 0x0) io_submit(r3, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000100)="b30c631cfeb72c7d93de599e0192bd9e8958", 0x12}]) 2018/04/16 20:32:22 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000da9000)={0x2, 0x3, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xffffff80}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}]}, 0x70}, 0x1}, 0x0) 2018/04/16 20:32:22 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000013000)={0x1, 0x10000007f, 0xa, 0x1000000000000008, 0x0, r0}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r1, &(0x7f00000001c0)="1f", &(0x7f0000016f02)=""/254}, 0x18) readv(r1, &(0x7f0000002240), 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)) 2018/04/16 20:32:22 executing program 1: r0 = msgget$private(0x0, 0x20004fe) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x12) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f00000000c0), 0x2) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) epoll_wait(r3, &(0x7f0000000040)=[{}], 0x1, 0x40) msgctl$IPC_RMID(r0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000c38000)={0x20000000, 0x0, 0x2}) setsockopt$inet_tcp_buf(r2, 0x6, 0x16, &(0x7f0000000100)="40a595c7b8475ee503bf02d0ed5e2161d1d8ec08daca3f2cadfd5324321dbb5a12f6893127aaced35a2223f7aee2ec1758", 0x31) 2018/04/16 20:32:22 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001680)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000003700)="b03866a5b41bd8bf7b6051b519af68e2dd876619e4d8a2148f47ee0330e1007e8e8f91f9b20271f158dd839273db71306d5d7cdef983bc", 0x37}], 0x1, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3}, @op={0x18, 0x117, 0x3}], 0x30, 0x1}, 0x10) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f0000000180)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1, &(0x7f0000001400)=""/6, 0x6}, 0x0) 2018/04/16 20:32:22 executing program 2: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x9, 0x80000010, 0x6) r1 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x7, 0x10041) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000040)) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0x47e) mmap(&(0x7f0000399000/0x1000)=nil, 0x40000, 0x0, 0x12, r0, 0x0) mremap(&(0x7f0000399000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000398000/0x1000)=nil) r2 = fcntl$getown(r0, 0x9) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000000)=0x8190) fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x1, 0x0, 0x2, 0x100, r2}) 2018/04/16 20:32:22 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x4) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) 2018/04/16 20:32:22 executing program 4: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x480800, 0x0) r0 = userfaultfd(0x0) r1 = dup(r0) faccessat(r1, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000f6bfe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000280)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f0000000240)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}, 0x200000}) connect$unix(r1, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e21}, 0x6e) 2018/04/16 20:32:22 executing program 5: r0 = perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x40001, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000001c0)={0x4, 0x21dd, 0x9, 0x0, 0x7}) r3 = dup2(r1, r0) r4 = accept$alg(r1, 0x0, 0x0) accept$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000040)="873a3d2f8a1a4d5211133f7e9c4eb5be", 0x10) recvmmsg(r4, &(0x7f0000003340)=[{{&(0x7f00000000c0)=@sco, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000000140)=""/94, 0x5e}}, {{&(0x7f0000002f40)=@pptp={0x0, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000003200), 0x0, &(0x7f0000000440)=""/239, 0xef}}], 0x2, 0x0, 0x0) 2018/04/16 20:32:22 executing program 2: r0 = socket(0x11, 0x2, 0x81) bind(r0, &(0x7f0000000000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) writev(r0, &(0x7f00000010c0), 0x0) 2018/04/16 20:32:22 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @random="cf41e420255a", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @multicast1=0xe0000001}, @icmp=@address_request={0x11}}}}}, 0x0) [ 69.625992] ================================================================== [ 69.633447] BUG: KMSAN: uninit-value in gf128mul_init_4k_lle+0x212/0x5c0 [ 69.640298] CPU: 1 PID: 5707 Comm: syz-executor6 Not tainted 4.16.0+ #84 [ 69.647148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.656507] Call Trace: [ 69.659115] dump_stack+0x185/0x1d0 [ 69.662752] ? gf128mul_init_4k_lle+0x212/0x5c0 [ 69.667433] kmsan_report+0x142/0x240 [ 69.671260] __msan_warning_32+0x6c/0xb0 [ 69.675332] gf128mul_init_4k_lle+0x212/0x5c0 [ 69.679843] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 69.685225] ? ghash_setkey+0x56/0x280 [ 69.689130] ghash_setkey+0x185/0x280 [ 69.692952] ? ghash_final+0x1f0/0x1f0 [ 69.696858] shash_async_setkey+0x337/0x4c0 [ 69.701204] ? shash_async_digest+0x1b0/0x1b0 [ 69.705719] crypto_ahash_setkey+0x31a/0x470 [ 69.710153] ? skcipher_encrypt_blkcipher+0x222/0x320 [ 69.715362] crypto_gcm_setkey+0xa3c/0xc10 [ 69.719621] ? crypto_gcm_exit_tfm+0xd0/0xd0 [ 69.724055] crypto_aead_setkey+0x373/0x4c0 [ 69.728405] aead_setkey+0xa0/0xc0 [ 69.731967] alg_setsockopt+0x6c5/0x740 [ 69.735972] ? aead_release+0x90/0x90 [ 69.739794] ? alg_accept+0xd0/0xd0 [ 69.743441] SYSC_setsockopt+0x4b8/0x570 [ 69.747524] SyS_setsockopt+0x76/0xa0 [ 69.751334] do_syscall_64+0x309/0x430 [ 69.755237] ? SYSC_recv+0xe0/0xe0 [ 69.759048] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 69.764245] RIP: 0033:0x455319 [ 69.767432] RSP: 002b:00007ff52d79ac68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 69.775141] RAX: ffffffffffffffda RBX: 00007ff52d79b6d4 RCX: 0000000000455319 [ 69.782418] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000013 [ 69.789699] RBP: 000000000072bea0 R08: 0000000000000018 R09: 0000000000000000 [ 69.796979] R10: 0000000020000080 R11: 0000000000000246 R12: 00000000ffffffff [ 69.804250] R13: 0000000000000510 R14: 00000000006faa20 R15: 0000000000000000 [ 69.811527] [ 69.813155] Uninit was stored to memory at: [ 69.817476] kmsan_internal_chain_origin+0x12b/0x210 [ 69.822580] kmsan_memcpy_origins+0x11d/0x170 [ 69.827078] __msan_memcpy+0x19f/0x1f0 [ 69.830987] gf128mul_init_4k_lle+0x99/0x5c0 [ 69.835404] ghash_setkey+0x185/0x280 [ 69.839206] shash_async_setkey+0x337/0x4c0 [ 69.843536] crypto_ahash_setkey+0x31a/0x470 [ 69.847935] crypto_gcm_setkey+0xa3c/0xc10 [ 69.852159] crypto_aead_setkey+0x373/0x4c0 [ 69.856486] aead_setkey+0xa0/0xc0 [ 69.860029] alg_setsockopt+0x6c5/0x740 [ 69.864004] SYSC_setsockopt+0x4b8/0x570 [ 69.868071] SyS_setsockopt+0x76/0xa0 [ 69.871862] do_syscall_64+0x309/0x430 [ 69.875751] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 69.880930] Uninit was stored to memory at: [ 69.885284] kmsan_internal_chain_origin+0x12b/0x210 [ 69.890397] __msan_chain_origin+0x69/0xc0 [ 69.894648] __crypto_xor+0x23c/0x16b0 [ 69.898525] crypto_ctr_crypt_inplace+0x29a/0x3a0 [ 69.903368] crypto_ctr_crypt+0x54c/0x7d0 [ 69.907510] skcipher_encrypt_blkcipher+0x222/0x320 [ 69.912530] crypto_gcm_setkey+0x6a3/0xc10 [ 69.916760] crypto_aead_setkey+0x373/0x4c0 [ 69.921094] aead_setkey+0xa0/0xc0 [ 69.924627] alg_setsockopt+0x6c5/0x740 [ 69.928603] SYSC_setsockopt+0x4b8/0x570 [ 69.932654] SyS_setsockopt+0x76/0xa0 [ 69.936450] do_syscall_64+0x309/0x430 [ 69.940332] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 69.945506] Local variable description: ----vla@crypto_ctr_crypt_inplace [ 69.952319] Variable was created at: [ 69.956032] crypto_ctr_crypt_inplace+0x19a/0x3a0 [ 69.960875] crypto_ctr_crypt+0x54c/0x7d0 [ 69.965006] ================================================================== [ 69.972355] Disabling lock debugging due to kernel taint [ 69.977788] Kernel panic - not syncing: panic_on_warn set ... [ 69.977788] [ 69.985143] CPU: 1 PID: 5707 Comm: syz-executor6 Tainted: G B 4.16.0+ #84 [ 69.993284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 70.002622] Call Trace: [ 70.005215] dump_stack+0x185/0x1d0 [ 70.008842] panic+0x39d/0x940 [ 70.012063] ? gf128mul_init_4k_lle+0x212/0x5c0 [ 70.016724] kmsan_report+0x238/0x240 [ 70.020524] __msan_warning_32+0x6c/0xb0 [ 70.024583] gf128mul_init_4k_lle+0x212/0x5c0 [ 70.029085] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 70.034443] ? ghash_setkey+0x56/0x280 [ 70.038327] ghash_setkey+0x185/0x280 [ 70.042131] ? ghash_final+0x1f0/0x1f0 [ 70.046013] shash_async_setkey+0x337/0x4c0 [ 70.050349] ? shash_async_digest+0x1b0/0x1b0 [ 70.054859] crypto_ahash_setkey+0x31a/0x470 [ 70.059285] ? skcipher_encrypt_blkcipher+0x222/0x320 [ 70.064487] crypto_gcm_setkey+0xa3c/0xc10 [ 70.068718] ? crypto_gcm_exit_tfm+0xd0/0xd0 [ 70.074156] crypto_aead_setkey+0x373/0x4c0 [ 70.078472] aead_setkey+0xa0/0xc0 [ 70.082009] alg_setsockopt+0x6c5/0x740 [ 70.085977] ? aead_release+0x90/0x90 [ 70.089767] ? alg_accept+0xd0/0xd0 [ 70.093387] SYSC_setsockopt+0x4b8/0x570 [ 70.097439] SyS_setsockopt+0x76/0xa0 [ 70.101228] do_syscall_64+0x309/0x430 [ 70.105105] ? SYSC_recv+0xe0/0xe0 [ 70.108641] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 70.113819] RIP: 0033:0x455319 [ 70.116993] RSP: 002b:00007ff52d79ac68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 70.124693] RAX: ffffffffffffffda RBX: 00007ff52d79b6d4 RCX: 0000000000455319 [ 70.131945] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000013 [ 70.139200] RBP: 000000000072bea0 R08: 0000000000000018 R09: 0000000000000000 [ 70.146457] R10: 0000000020000080 R11: 0000000000000246 R12: 00000000ffffffff [ 70.153713] R13: 0000000000000510 R14: 00000000006faa20 R15: 0000000000000000 [ 70.161570] Dumping ftrace buffer: [ 70.165095] (ftrace buffer empty) [ 70.168783] Kernel Offset: disabled [ 70.172387] Rebooting in 86400 seconds..