INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.8' (ECDSA) to the list of known hosts. 2018/04/19 01:54:07 fuzzer started 2018/04/19 01:54:08 dialing manager at 10.128.0.26:44151 2018/04/19 01:54:14 kcov=true, comps=false 2018/04/19 01:54:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc) getsockname(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f00000000c0)=0x3a) 2018/04/19 01:54:17 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000003000)={0x1, 0x25c, &(0x7f00000004c0)=ANY=[], &(0x7f0000000480)="47504cdacf7e053800", 0x27, 0xfe7f, &(0x7f0000000280)=""/127}, 0x48) 2018/04/19 01:54:17 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_get$pid(0x3, 0x0) 2018/04/19 01:54:17 executing program 3: seccomp(0x1, 0x0, &(0x7f0000fa6000)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xfffffffffffffffb}]}) perf_event_open(&(0x7f000002ef88)={0x1, 0x78, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_yield() 2018/04/19 01:54:17 executing program 5: 2018/04/19 01:54:17 executing program 4: 2018/04/19 01:54:17 executing program 6: 2018/04/19 01:54:17 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) syzkaller login: [ 42.167848] ip (3755) used greatest stack depth: 54672 bytes left [ 42.752563] ip (3807) used greatest stack depth: 54312 bytes left [ 43.745773] ip (3905) used greatest stack depth: 53960 bytes left [ 44.056148] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.062734] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.087237] device bridge_slave_0 entered promiscuous mode [ 44.144231] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.150775] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.181214] device bridge_slave_0 entered promiscuous mode [ 44.209932] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.216468] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.269094] device bridge_slave_0 entered promiscuous mode [ 44.281114] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.287608] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.311427] device bridge_slave_0 entered promiscuous mode [ 44.321587] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.328168] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.337685] device bridge_slave_0 entered promiscuous mode [ 44.353070] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.359546] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.370391] device bridge_slave_1 entered promiscuous mode [ 44.385076] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.391595] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.427005] device bridge_slave_1 entered promiscuous mode [ 44.433904] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.440397] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.455548] device bridge_slave_0 entered promiscuous mode [ 44.464850] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.471356] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.480704] device bridge_slave_0 entered promiscuous mode [ 44.493013] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.499522] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.510107] device bridge_slave_0 entered promiscuous mode [ 44.532222] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.538681] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.560123] device bridge_slave_1 entered promiscuous mode [ 44.566769] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.573246] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.582642] device bridge_slave_1 entered promiscuous mode [ 44.595127] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.602556] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.609082] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.616681] device bridge_slave_1 entered promiscuous mode [ 44.626788] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.633862] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.677945] device bridge_slave_1 entered promiscuous mode [ 44.687078] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.695486] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.701950] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.729544] device bridge_slave_1 entered promiscuous mode [ 44.755027] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.761566] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.787699] device bridge_slave_1 entered promiscuous mode [ 44.804272] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.813789] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.823303] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.832649] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.849328] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.876491] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.966020] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.973601] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.031115] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.066383] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.077509] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.094556] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.169738] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.235464] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.535327] ip (4025) used greatest stack depth: 53656 bytes left [ 45.815178] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.843173] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.940140] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.051983] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.060773] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.077820] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.134872] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.168741] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.183085] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.190673] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.277562] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.343769] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.352968] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.363758] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.409662] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.503083] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.006689] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.126679] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.141665] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.215164] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.283723] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.340785] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.358013] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.393427] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.415411] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.454613] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.485784] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.498813] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.515812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.547190] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.559103] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.566712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.580236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.603430] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.614106] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.625726] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.642351] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.652764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.687561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.735750] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.749711] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.757479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.775814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.814689] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.822554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.847892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.880476] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.887692] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.913801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.934134] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.941833] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.956886] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.986129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.011142] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.028194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.046063] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.054249] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.067511] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.075875] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.084119] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.095268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.138191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.170841] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.196548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.219746] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.236983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.249094] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.256913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.275207] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.289626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.304498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.341657] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.353308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.380078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.416747] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.423936] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.447460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.543873] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.551094] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.560667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.249087] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.255573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.262464] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.268932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.285197] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.293392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.314398] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.320893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.327750] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.334208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.377112] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.391779] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.398247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.405137] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.411572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.466950] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.540698] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.547203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.554132] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.560584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.610088] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.684787] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.691309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.698207] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.704685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.792135] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.806300] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.812777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.819650] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.826132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.848694] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.868275] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.874761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.881608] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.888073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.938504] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.103703] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.110216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.117120] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.123595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.145957] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.295188] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.306232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.333715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.348120] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.356498] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.364743] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.372595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.842436] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.952618] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.979611] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.107420] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.255780] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.506921] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.631885] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.638243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.649643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.686796] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.708556] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.751440] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.757724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.765298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.845955] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.852247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.861843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.965755] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.972306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.984154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.147148] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.153443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.168014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.309923] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.316265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.331642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.550854] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.557177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.569601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.592477] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.598838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.620993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.036807] audit: type=1326 audit(1524102885.035:3): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=5730 comm="syz-executor3" exe="/root/syz-executor3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455329 code=0xffff0000 [ 67.891325] audit: type=1326 audit(1524102885.890:4): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=5730 comm="syz-executor3" exe="/root/syz-executor3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455329 code=0xffff0000 2018/04/19 01:54:46 executing program 0: r0 = socket$inet6(0xa, 0x802, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000001000)={0xa, 0x4e23, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) 2018/04/19 01:54:46 executing program 6: 2018/04/19 01:54:46 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ifreq(r0, 0x8000000008922, &(0x7f0000000100)={'syz_tun\x00', @ifru_map}) 2018/04/19 01:54:46 executing program 5: r0 = socket$nl_generic(0xa, 0x2, 0x11) sendmsg$nl_generic(r0, &(0x7f0000004fc8)={&(0x7f0000001ff4)={0x2, 0x2}, 0x12dd0582, &(0x7f0000001000)={&(0x7f0000000fd8)={0x4}, 0x14}, 0x1}, 0x8000) sendmsg$nl_generic(r0, &(0x7f000000ac37)={&(0x7f000000aff4)={0x10}, 0xc, &(0x7f000000aff0)={&(0x7f0000001040)={0x14}, 0x14}, 0x1}, 0x0) 2018/04/19 01:54:46 executing program 4: mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x18071, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000b2000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$int_in(r0, 0x80045438, &(0x7f00000000c0)) 2018/04/19 01:54:46 executing program 2: r0 = epoll_create1(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000a09ff1)='net/ipv6_route\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000e37ff4)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)={0x1}) 2018/04/19 01:54:46 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000273000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f0000000000)={&(0x7f0000001380)=@l2, 0x80, &(0x7f0000000180)=[{&(0x7f0000000040)=""/131, 0x83}, {&(0x7f0000000000)=""/3, 0x3}], 0x2, &(0x7f0000000380)=""/4096, 0x1000}, 0x0) sendmsg$netlink(r1, &(0x7f0000009800)={0x0, 0x0, &(0x7f00000096c0)=[{&(0x7f0000004900)={0x10}, 0x10}, {&(0x7f0000004c40)={0x10, 0x0, 0x120}, 0x10}, {&(0x7f0000009540)={0x50, 0x2f, 0x1, 0x0, 0x0, "", [@nested={0x24, 0x0, [@generic="35b2d3451d81e3b8350f", @typed={0x14, 0x4b, @ipv6}]}, @typed={0x14, 0x5, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}, @typed={0x8, 0xc, @ipv4=@loopback=0x7f000001}]}, 0x50}], 0x3, &(0x7f0000009740)=[@rights={0x18, 0x1, 0x1, [r2, r3]}, @rights={0x20, 0x1, 0x1, [r4, r0, r0]}, @rights={0x30, 0x1, 0x1, [r1, r1, r0, r2, r1, r3, r2, r2]}, @rights={0x18, 0x1, 0x1, [r4]}, @rights={0x20, 0x1, 0x1, [r4, r1, r4]}, @rights={0x18, 0x1, 0x1, [r2, r3]}], 0xb8, 0x4000000}, 0x2004c080) 2018/04/19 01:54:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001c00870f000000000000000007000000", @ANYBLOB="ffff00000a000200aaaaaaaaaaaa0000"], 0x2}, 0x1}, 0x0) [ 68.097198] syz_tun: Invalid MTU 0 requested, hw min 68 [ 68.105430] ================================================================== [ 68.112831] BUG: KMSAN: uninit-value in csum_partial+0x78e/0x850 [ 68.118981] CPU: 0 PID: 5779 Comm: syz-executor5 Not tainted 4.16.0+ #84 [ 68.125820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 68.135181] Call Trace: [ 68.137761] [ 68.139916] dump_stack+0x185/0x1d0 [ 68.143546] ? csum_partial+0x78e/0x850 [ 68.147518] kmsan_report+0x142/0x240 [ 68.151322] __msan_warning_32+0x6c/0xb0 [ 68.155394] csum_partial+0x78e/0x850 [ 68.159205] csum_partial_ext+0x89/0xa0 [ 68.163188] __skb_checksum+0x6d4/0x1010 [ 68.167261] ? skb_checksum+0x120/0x120 [ 68.171250] skb_checksum+0xec/0x120 [ 68.174961] ? skb_checksum+0x120/0x120 [ 68.178931] ? csum_partial_ext+0xa0/0xa0 [ 68.183080] __skb_checksum_complete+0x90/0x400 [ 68.187753] ? __udp4_lib_rcv+0xb1/0x4740 [ 68.191903] ? __udp4_lib_rcv+0xf9a/0x4740 2018/04/19 01:54:46 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x31, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f00005ca000/0x4000)=nil, 0x4000, 0x6, 0xffffffffffffffff) madvise(&(0x7f00003eb000/0xc00000)=nil, 0xc00000, 0x9) 2018/04/19 01:54:46 executing program 0: [ 68.196140] __udp4_lib_rcv+0x101b/0x4740 [ 68.200293] udp_rcv+0x5c/0x70 [ 68.203482] ? udp_v4_early_demux+0x1cd0/0x1cd0 [ 68.208150] ip_local_deliver_finish+0x6ed/0xd40 [ 68.212908] ip_local_deliver+0x43c/0x4e0 [ 68.217065] ? ip_local_deliver+0x4e0/0x4e0 [ 68.221396] ? ip_call_ra_chain+0x7b0/0x7b0 [ 68.225716] ip_rcv_finish+0x1253/0x16d0 [ 68.229782] ip_rcv+0x119d/0x16f0 [ 68.233230] ? ip_rcv+0x16f0/0x16f0 [ 68.236863] __netif_receive_skb_core+0x47cf/0x4a80 [ 68.241878] ? rb_insert_color+0xa4/0x1300 [ 68.246117] ? ip_local_deliver_finish+0xd40/0xd40 [ 68.251049] process_backlog+0x62d/0xe20 [ 68.255119] ? rps_trigger_softirq+0x2f0/0x2f0 [ 68.259701] net_rx_action+0x7c1/0x1a70 [ 68.263679] ? net_tx_action+0xab0/0xab0 [ 68.267744] __do_softirq+0x56d/0x93d [ 68.271554] do_softirq_own_stack+0x2a/0x40 [ 68.275864] [ 68.278105] __local_bh_enable_ip+0x114/0x140 [ 68.282601] local_bh_enable+0x36/0x40 [ 68.286488] ip_finish_output2+0x124e/0x1380 [ 68.290901] ip_finish_output+0xcb0/0xff0 2018/04/19 01:54:46 executing program 2: [ 68.295058] ip_output+0x502/0x5c0 [ 68.298597] ? ip_mc_finish_output+0x3b0/0x3b0 [ 68.303182] ? ip_finish_output+0xff0/0xff0 [ 68.307509] ip_send_skb+0x5f3/0x820 [ 68.311223] ? __ip_local_out+0x5b0/0x5b0 [ 68.315386] udp_send_skb+0xe97/0x1320 [ 68.319287] udp_sendmsg+0xa24/0x3180 [ 68.323088] ? kmsan_set_origin_inline+0x6b/0x120 [ 68.327924] ? ip_copy_metadata+0xac0/0xac0 [ 68.332242] ? __switch_to+0x2b3/0x420 [ 68.336129] ? switch_fpu_finish+0x6e/0x4d0 [ 68.340445] ? __switch_to+0x2b3/0x420 [ 68.344339] udpv6_sendmsg+0x1299/0x45b0 [ 68.348412] ? kmsan_set_origin+0x9e/0x160 [ 68.352653] ? kmsan_internal_unpoison_shadow+0x83/0xe0 [ 68.358023] ? rw_copy_check_uvector+0x5af/0x6c0 [ 68.362785] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 68.368241] ? rw_copy_check_uvector+0x643/0x6c0 [ 68.373001] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 68.378452] ? import_iovec+0x3cd/0x610 [ 68.382434] ? udpv6_queue_rcv_skb+0x1c60/0x1c60 [ 68.387185] inet_sendmsg+0x48d/0x740 [ 68.390984] ? security_socket_sendmsg+0x9e/0x210 [ 68.395825] ? inet_getname+0x500/0x500 [ 68.399804] ___sys_sendmsg+0xec0/0x1310 [ 68.403876] ? __fdget+0x4e/0x60 [ 68.407241] ? __fget_light+0x56/0x710 [ 68.411122] ? __fdget+0x4e/0x60 [ 68.414494] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 68.419871] ? __fget_light+0x6b9/0x710 [ 68.423867] SYSC_sendmsg+0x2a3/0x3d0 [ 68.427685] SyS_sendmsg+0x54/0x80 [ 68.431232] do_syscall_64+0x309/0x430 [ 68.435133] ? ___sys_sendmsg+0x1310/0x1310 [ 68.439471] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 68.444667] RIP: 0033:0x455329 [ 68.447853] RSP: 002b:00007fa22878bc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 68.455565] RAX: ffffffffffffffda RBX: 00007fa22878c6d4 RCX: 0000000000455329 [ 68.462846] RDX: 0000000000000000 RSI: 000000002000ac37 RDI: 0000000000000013 [ 68.470125] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 68.477410] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 68.484688] R13: 00000000000004ef R14: 00000000006fa708 R15: 0000000000000000 [ 68.491965] [ 68.493590] Uninit was created at: [ 68.497205] kmsan_alloc_meta_for_pages+0x161/0x3a0 [ 68.502228] kmsan_alloc_page+0x82/0xe0 [ 68.506209] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 68.510960] alloc_pages_current+0x6b5/0x970 [ 68.515349] skb_page_frag_refill+0x3ba/0x5e0 [ 68.519828] sk_page_frag_refill+0xa4/0x340 [ 68.524217] __ip_append_data+0x107e/0x3d10 [ 68.528530] ip_append_data+0x2fb/0x440 [ 68.532493] udp_sendmsg+0x746/0x3180 [ 68.536277] udpv6_sendmsg+0x1299/0x45b0 [ 68.540317] inet_sendmsg+0x48d/0x740 [ 68.544100] ___sys_sendmsg+0xec0/0x1310 [ 68.548143] SYSC_sendmsg+0x2a3/0x3d0 [ 68.551923] SyS_sendmsg+0x54/0x80 [ 68.555528] do_syscall_64+0x309/0x430 [ 68.559408] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 68.564572] ================================================================== [ 68.571902] Disabling lock debugging due to kernel taint [ 68.577331] Kernel panic - not syncing: panic_on_warn set ... [ 68.577331] [ 68.584673] CPU: 0 PID: 5779 Comm: syz-executor5 Tainted: G B 4.16.0+ #84 [ 68.592788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 68.602131] Call Trace: [ 68.604693] [ 68.606830] dump_stack+0x185/0x1d0 [ 68.610439] panic+0x39d/0x940 [ 68.613622] ? csum_partial+0x78e/0x850 [ 68.617576] kmsan_report+0x238/0x240 [ 68.621362] __msan_warning_32+0x6c/0xb0 [ 68.625419] csum_partial+0x78e/0x850 [ 68.629214] csum_partial_ext+0x89/0xa0 [ 68.633493] __skb_checksum+0x6d4/0x1010 [ 68.637538] ? skb_checksum+0x120/0x120 [ 68.641491] skb_checksum+0xec/0x120 [ 68.645182] ? skb_checksum+0x120/0x120 [ 68.649133] ? csum_partial_ext+0xa0/0xa0 [ 68.653261] __skb_checksum_complete+0x90/0x400 [ 68.657929] ? __udp4_lib_rcv+0xb1/0x4740 [ 68.662061] ? __udp4_lib_rcv+0xf9a/0x4740 [ 68.666283] __udp4_lib_rcv+0x101b/0x4740 [ 68.670417] udp_rcv+0x5c/0x70 [ 68.673588] ? udp_v4_early_demux+0x1cd0/0x1cd0 [ 68.678237] ip_local_deliver_finish+0x6ed/0xd40 [ 68.682973] ip_local_deliver+0x43c/0x4e0 [ 68.687110] ? ip_local_deliver+0x4e0/0x4e0 [ 68.691417] ? ip_call_ra_chain+0x7b0/0x7b0 [ 68.695718] ip_rcv_finish+0x1253/0x16d0 [ 68.699776] ip_rcv+0x119d/0x16f0 [ 68.703224] ? ip_rcv+0x16f0/0x16f0 [ 68.706840] __netif_receive_skb_core+0x47cf/0x4a80 [ 68.711835] ? rb_insert_color+0xa4/0x1300 [ 68.716060] ? ip_local_deliver_finish+0xd40/0xd40 [ 68.720979] process_backlog+0x62d/0xe20 [ 68.725040] ? rps_trigger_softirq+0x2f0/0x2f0 [ 68.729797] net_rx_action+0x7c1/0x1a70 [ 68.733766] ? net_tx_action+0xab0/0xab0 [ 68.737815] __do_softirq+0x56d/0x93d [ 68.741610] do_softirq_own_stack+0x2a/0x40 [ 68.745905] [ 68.748128] __local_bh_enable_ip+0x114/0x140 [ 68.752604] local_bh_enable+0x36/0x40 [ 68.756483] ip_finish_output2+0x124e/0x1380 [ 68.760891] ip_finish_output+0xcb0/0xff0 [ 68.765039] ip_output+0x502/0x5c0 [ 68.768568] ? ip_mc_finish_output+0x3b0/0x3b0 [ 68.773138] ? ip_finish_output+0xff0/0xff0 [ 68.777446] ip_send_skb+0x5f3/0x820 [ 68.781145] ? __ip_local_out+0x5b0/0x5b0 [ 68.785289] udp_send_skb+0xe97/0x1320 [ 68.789173] udp_sendmsg+0xa24/0x3180 [ 68.792985] ? kmsan_set_origin_inline+0x6b/0x120 [ 68.797809] ? ip_copy_metadata+0xac0/0xac0 [ 68.802126] ? __switch_to+0x2b3/0x420 [ 68.806006] ? switch_fpu_finish+0x6e/0x4d0 [ 68.810319] ? __switch_to+0x2b3/0x420 [ 68.814194] udpv6_sendmsg+0x1299/0x45b0 [ 68.818261] ? kmsan_set_origin+0x9e/0x160 [ 68.822497] ? kmsan_internal_unpoison_shadow+0x83/0xe0 [ 68.827850] ? rw_copy_check_uvector+0x5af/0x6c0 [ 68.832594] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 68.838036] ? rw_copy_check_uvector+0x643/0x6c0 [ 68.842789] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 68.848219] ? import_iovec+0x3cd/0x610 [ 68.852181] ? udpv6_queue_rcv_skb+0x1c60/0x1c60 [ 68.856923] inet_sendmsg+0x48d/0x740 [ 68.860712] ? security_socket_sendmsg+0x9e/0x210 [ 68.865533] ? inet_getname+0x500/0x500 [ 68.869500] ___sys_sendmsg+0xec0/0x1310 [ 68.873559] ? __fdget+0x4e/0x60 [ 68.876925] ? __fget_light+0x56/0x710 [ 68.880800] ? __fdget+0x4e/0x60 [ 68.884147] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 68.889489] ? __fget_light+0x6b9/0x710 [ 68.893450] SYSC_sendmsg+0x2a3/0x3d0 [ 68.897239] SyS_sendmsg+0x54/0x80 [ 68.900761] do_syscall_64+0x309/0x430 [ 68.904628] ? ___sys_sendmsg+0x1310/0x1310 [ 68.908935] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 68.914104] RIP: 0033:0x455329 [ 68.917272] RSP: 002b:00007fa22878bc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 68.924965] RAX: ffffffffffffffda RBX: 00007fa22878c6d4 RCX: 0000000000455329 [ 68.932219] RDX: 0000000000000000 RSI: 000000002000ac37 RDI: 0000000000000013 [ 68.939467] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 68.946716] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 68.953965] R13: 00000000000004ef R14: 00000000006fa708 R15: 0000000000000000 [ 68.961711] Dumping ftrace buffer: [ 68.965234] (ftrace buffer empty) [ 68.968916] Kernel Offset: disabled [ 68.972518] Rebooting in 86400 seconds..