INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.0' (ECDSA) to the list of known hosts. 2018/04/20 18:00:24 fuzzer started 2018/04/20 18:00:24 dialing manager at 10.128.0.26:40315 2018/04/20 18:00:30 kcov=true, comps=false 2018/04/20 18:00:33 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xfffffffffffffd90, 0x20020003, &(0x7f0000385ff0)={0x2, 0x20000000004e21, @loopback=0x7f000001}, 0x10) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') recvfrom$inet(r0, &(0x7f0000000040)=""/149, 0xfffffffffffffef3, 0x100, 0x0, 0xfd69) 2018/04/20 18:00:33 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x800) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 2018/04/20 18:00:33 executing program 7: r0 = socket$inet6_sctp(0xa, 0x80000000005, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000001000)={0x0, @in6={{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0xfffffffffffffcd6) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000000c0)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001000)={{{@in=@rand_addr=0x1000000, @in6=@mcast1={0xff, 0x1, [], 0x1}}}, {{@in=@multicast2=0xe0000002}, 0x0, @in=@dev={0xac, 0x14, 0x14}}}, 0xfffffffffffffe29) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000001000)=""/144, &(0x7f0000001ffc)=0x90) 2018/04/20 18:00:33 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc), 0x4) 2018/04/20 18:00:33 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 2018/04/20 18:00:33 executing program 4: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0xfffffffffffffe8c) r0 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/arp\x00') preadv(r0, &(0x7f0000000000), 0x200000000000022b, 0x10000003) 2018/04/20 18:00:33 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)=@ipv4_newroute={0x28, 0x18, 0x505, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, [@RTA_MULTIPATH={0xc, 0x9, [{}]}]}, 0x28}, 0x1}, 0x0) 2018/04/20 18:00:33 executing program 1: r0 = socket(0x1e, 0x1, 0x0) bind(r0, &(0x7f00008a1f80)=@generic={0x42001e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d64fb8f8401a3ff59829a2b0afe7ce43a5b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31510000500000000000bdb9c8ea31000077aeb81c90001d6f7c980400000000f70dc136cb184a"}, 0x80) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f00000000c0)=@generic={0x10000000001e, "0100000000001e0000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624280027800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000001380)=[{&(0x7f0000000380)="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", 0x401}], 0x1, &(0x7f0000000040)}, 0x0) syzkaller login: [ 41.912903] ip (3750) used greatest stack depth: 54672 bytes left [ 43.286707] ip (3881) used greatest stack depth: 53960 bytes left [ 43.776511] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.783011] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.815072] device bridge_slave_0 entered promiscuous mode [ 43.887284] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.893790] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.927985] device bridge_slave_0 entered promiscuous mode [ 43.984685] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.991244] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.026913] device bridge_slave_0 entered promiscuous mode [ 44.050564] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.057124] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.103060] device bridge_slave_1 entered promiscuous mode [ 44.123244] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.129728] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.148916] device bridge_slave_0 entered promiscuous mode [ 44.159405] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.165855] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.178233] device bridge_slave_1 entered promiscuous mode [ 44.188398] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.194834] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.213164] device bridge_slave_0 entered promiscuous mode [ 44.222868] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.229329] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.252376] device bridge_slave_0 entered promiscuous mode [ 44.268898] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.275374] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.285086] device bridge_slave_0 entered promiscuous mode [ 44.299729] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.306188] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.324826] device bridge_slave_0 entered promiscuous mode [ 44.342322] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.358707] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.368262] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.374727] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.393868] device bridge_slave_1 entered promiscuous mode [ 44.415010] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.421486] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.437870] device bridge_slave_1 entered promiscuous mode [ 44.445341] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.451794] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.476004] device bridge_slave_1 entered promiscuous mode [ 44.482689] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.489142] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.515267] device bridge_slave_1 entered promiscuous mode [ 44.535989] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.542449] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.553902] device bridge_slave_1 entered promiscuous mode [ 44.562594] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.576856] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.590620] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.598940] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.606617] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.613129] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.659131] device bridge_slave_1 entered promiscuous mode [ 44.666077] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.734746] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.770018] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.788586] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.798592] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.860895] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.879567] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.966844] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.976288] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.088710] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.508014] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.547773] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.702561] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.780927] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.788791] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.803268] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.906602] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.010711] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.018123] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.031147] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.041335] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.051456] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.123553] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.228896] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.277011] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.284565] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.644131] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.718457] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.850620] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 46.927292] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.017909] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.046260] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.075355] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.082550] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.096451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.144826] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.165787] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.173004] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.187332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.226543] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.248958] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.266546] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.317258] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.341880] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.352466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.366007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.401764] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.412441] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.435847] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.442980] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.457377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.490552] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.501173] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.512233] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.528334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.551746] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.566307] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.574764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.621575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.665090] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.680628] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.691117] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.698357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.710165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.744272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.771800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.790387] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.807588] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.816840] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.850348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.865485] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.883822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.904624] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.915358] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.924917] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.933276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.976376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.995542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.022737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.033975] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.043153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.054600] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.072806] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.089326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.115096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.150943] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.182220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.199868] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.207378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.216094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.921344] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.927858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.934708] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.941161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.975990] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 49.982552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.039422] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.045899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.052753] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.059202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.132973] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.154618] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.161108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.167910] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.174339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.185288] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.198233] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.204670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.211503] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.217937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.265437] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.294307] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.300791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.307615] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.314126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.370012] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.387433] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.393928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.400781] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.407240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.449724] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.464687] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.471137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.477978] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.484428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.525005] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.790506] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.797075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.803948] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.810401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.876796] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.040198] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.056646] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.082300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.096623] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.103737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.111517] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.118960] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.330849] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.565251] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.707145] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.826665] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.834569] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.851885] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.954226] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.160705] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.166990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.186518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.251536] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.402778] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.409116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.418884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.455272] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.461649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.469430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.622970] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.629286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.637307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.657506] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.669879] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.683336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.694647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.728836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.750978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.834578] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.840836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.852550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.159995] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.166337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.177642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/20 18:01:00 executing program 7: lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 2018/04/20 18:01:00 executing program 7: r0 = memfd_create(&(0x7f0000000000)="5e2d217d5b6d643573756d296d696d655f7479706573656c851773656375726974797b275b7070703100", 0x0) fcntl$addseals(r0, 0x409, 0x800004) 2018/04/20 18:01:00 executing program 4: mkdir(&(0x7f0000fb3000)='./file0\x00', 0x0) mount(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='mqueue\x00', 0x0, &(0x7f0000e2ef53)) umount2(&(0x7f0000000040)='./file0\x00', 0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000a23000)='./file0\x00', 0xc) 2018/04/20 18:01:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000026002107000000000000000003000000"], 0x1}, 0x1}, 0x0) 2018/04/20 18:01:00 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000000a40)=[{{&(0x7f0000000200)=@ipx, 0x80, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/61, 0x3d}, {&(0x7f0000000600)=""/147, 0x93}], 0x2}}], 0x1, 0x0, &(0x7f0000000b00)) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="8e86a4b9500a1139a0d93a78de7ed00ae239537b41a4eacfcfd4e8a048f8af1b89e866cfb9bde86f5b1d1bae840e6c373fd2d58909d8ac8f1aca1b6e95b92948d4a3b5", 0x43}], 0x1, &(0x7f0000002000)}, 0x8000) sendmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000002ff0)=[{&(0x7f0000000040)="bce5", 0x2}], 0x1, &(0x7f000000ae80)}, 0x0) 2018/04/20 18:01:00 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000010000000002, &(0x7f00001f4ffc)=0x8001, 0x4) bind$inet6(r0, &(0x7f00005c2fe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/20 18:01:00 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000360000)={0x0, 0x0, &(0x7f000035d000)={&(0x7f000033c000)=ANY=[@ANYBLOB="020d00001000000000000000000000000300060000000000020000007f00000100000000000000000300050000000000020000004000000003000000000000000800120000000100000000000000000030000000000000000000000000000000ff010000000000000000000000000100000000000000000000ffffe0000001"], 0x7f}, 0x1}, 0x0) 2018/04/20 18:01:00 executing program 1: r0 = socket(0x1e, 0x1, 0x0) bind(r0, &(0x7f00008a1f80)=@generic={0x42001e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d64fb8f8401a3ff59829a2b0afe7ce43a5b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31510000500000000000bdb9c8ea31000077aeb81c90001d6f7c980400000000f70dc136cb184a"}, 0x80) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f00000000c0)=@generic={0x10000000001e, "0100000000001e0000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624280027800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000001380)=[{&(0x7f0000000380)="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", 0x401}], 0x1, &(0x7f0000000040)}, 0x0) [ 67.480487] ================================================================== [ 67.487911] BUG: KMSAN: uninit-value in csum_partial_copy_to_user+0x450/0x500 [ 67.495180] CPU: 1 PID: 5772 Comm: syz-executor3 Not tainted 4.16.0+ #84 [ 67.501996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 67.511328] Call Trace: [ 67.513903] dump_stack+0x185/0x1d0 [ 67.517519] ? csum_partial_copy_to_user+0x450/0x500 [ 67.522602] kmsan_report+0x142/0x240 [ 67.526389] __msan_warning_32+0x6c/0xb0 [ 67.530448] csum_partial_copy_to_user+0x450/0x500 [ 67.535369] csum_and_copy_to_iter+0x3dc/0x2140 [ 67.540025] ? kmsan_set_origin_inline+0x6b/0x120 [ 67.544848] ? __msan_poison_alloca+0x15c/0x1d0 [ 67.549506] skb_copy_and_csum_datagram+0x6d2/0x1080 [ 67.554614] skb_copy_and_csum_datagram_msg+0x557/0x960 [ 67.559979] udpv6_recvmsg+0xc65/0x29e0 [ 67.563941] ? udp6_lib_lookup_skb+0x240/0x240 [ 67.568515] inet_recvmsg+0x4c2/0x5f0 [ 67.572308] sock_recvmsg+0x1d0/0x230 [ 67.576090] ? inet_sendpage+0x8c0/0x8c0 [ 67.580142] ___sys_recvmsg+0x3fb/0x810 [ 67.584102] ? __fget_light+0x56/0x710 [ 67.587975] ? __fdget+0x4e/0x60 [ 67.591337] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 67.596692] ? __fget_light+0x6b9/0x710 [ 67.600650] __sys_recvmmsg+0x54e/0xdb0 [ 67.604614] ? kmsan_set_origin+0x9e/0x160 [ 67.608833] SYSC_recvmmsg+0x29b/0x3e0 [ 67.612701] SyS_recvmmsg+0x76/0xa0 [ 67.616325] do_syscall_64+0x309/0x430 [ 67.620207] ? __sys_recvmmsg+0xdb0/0xdb0 [ 67.624337] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 67.629504] RIP: 0033:0x455379 [ 67.632670] RSP: 002b:00007f2a39399c68 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 67.640363] RAX: ffffffffffffffda RBX: 00007f2a3939a6d4 RCX: 0000000000455379 [ 67.647614] RDX: 0000000000000001 RSI: 0000000020000a40 RDI: 0000000000000013 [ 67.654869] RBP: 000000000072bea0 R08: 0000000020000b00 R09: 0000000000000000 [ 67.662121] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 67.669370] R13: 000000000000049e R14: 00000000006f9f70 R15: 0000000000000000 [ 67.676624] [ 67.678228] Uninit was created at: [ 67.681749] kmsan_alloc_meta_for_pages+0x161/0x3a0 [ 67.686741] kmsan_alloc_page+0x82/0xe0 [ 67.690699] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 67.695443] alloc_pages_current+0x6b5/0x970 [ 67.699834] skb_page_frag_refill+0x3ba/0x5e0 [ 67.704309] sk_page_frag_refill+0xa4/0x340 [ 67.708629] __ip6_append_data+0x1a20/0x4bb0 [ 67.713033] ip6_append_data+0x40e/0x6b0 [ 67.717096] udpv6_sendmsg+0xfd5/0x45b0 [ 67.721072] inet_sendmsg+0x48d/0x740 [ 67.724869] ___sys_sendmsg+0xec0/0x1310 [ 67.728914] SYSC_sendmsg+0x2a3/0x3d0 [ 67.732700] SyS_sendmsg+0x54/0x80 [ 67.736230] do_syscall_64+0x309/0x430 [ 67.740115] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 67.745281] ================================================================== [ 67.752626] Disabling lock debugging due to kernel taint [ 67.758068] Kernel panic - not syncing: panic_on_warn set ... [ 67.758068] [ 67.765439] CPU: 1 PID: 5772 Comm: syz-executor3 Tainted: G B 4.16.0+ #84 [ 67.773563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 67.782896] Call Trace: [ 67.785470] dump_stack+0x185/0x1d0 [ 67.789086] panic+0x39d/0x940 [ 67.792273] ? csum_partial_copy_to_user+0x450/0x500 [ 67.797356] kmsan_report+0x238/0x240 [ 67.801151] __msan_warning_32+0x6c/0xb0 [ 67.805451] csum_partial_copy_to_user+0x450/0x500 [ 67.810362] csum_and_copy_to_iter+0x3dc/0x2140 [ 67.815018] ? kmsan_set_origin_inline+0x6b/0x120 [ 67.819860] ? __msan_poison_alloca+0x15c/0x1d0 [ 67.824516] skb_copy_and_csum_datagram+0x6d2/0x1080 [ 67.829640] skb_copy_and_csum_datagram_msg+0x557/0x960 [ 67.835001] udpv6_recvmsg+0xc65/0x29e0 [ 67.838969] ? udp6_lib_lookup_skb+0x240/0x240 [ 67.843531] inet_recvmsg+0x4c2/0x5f0 [ 67.847312] sock_recvmsg+0x1d0/0x230 [ 67.851093] ? inet_sendpage+0x8c0/0x8c0 [ 67.855136] ___sys_recvmsg+0x3fb/0x810 [ 67.859101] ? __fget_light+0x56/0x710 [ 67.862978] ? __fdget+0x4e/0x60 [ 67.866340] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 67.871684] ? __fget_light+0x6b9/0x710 [ 67.875642] __sys_recvmmsg+0x54e/0xdb0 [ 67.879618] ? kmsan_set_origin+0x9e/0x160 [ 67.883847] SYSC_recvmmsg+0x29b/0x3e0 [ 67.887720] SyS_recvmmsg+0x76/0xa0 [ 67.891339] do_syscall_64+0x309/0x430 [ 67.895221] ? __sys_recvmmsg+0xdb0/0xdb0 [ 67.899379] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 67.904551] RIP: 0033:0x455379 [ 67.907727] RSP: 002b:00007f2a39399c68 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 67.915440] RAX: ffffffffffffffda RBX: 00007f2a3939a6d4 RCX: 0000000000455379 [ 67.922687] RDX: 0000000000000001 RSI: 0000000020000a40 RDI: 0000000000000013 [ 67.929941] RBP: 000000000072bea0 R08: 0000000020000b00 R09: 0000000000000000 [ 67.937195] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 67.944444] R13: 000000000000049e R14: 00000000006f9f70 R15: 0000000000000000 [ 67.952149] Dumping ftrace buffer: [ 67.955672] (ftrace buffer empty) [ 67.959358] Kernel Offset: disabled [ 67.962969] Rebooting in 86400 seconds..