INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.26' (ECDSA) to the list of known hosts. 2018/04/14 01:36:24 fuzzer started 2018/04/14 01:36:24 dialing manager at 10.128.0.26:36243 2018/04/14 01:36:30 kcov=true, comps=false 2018/04/14 01:36:33 executing program 0: r0 = gettid() perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cpuset\x00') r2 = socket$kcm(0x29, 0x2, 0x0) sendfile(r2, r1, &(0x7f0000301ff8), 0xffffffff) 2018/04/14 01:36:33 executing program 1: r0 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'bcsh0\x00', 0x3}) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r1, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x400454dc, &(0x7f0000000040)) 2018/04/14 01:36:33 executing program 3: perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$setname(0xf, &(0x7f0000000040)='{\x00') 2018/04/14 01:36:33 executing program 7: msgrcv(0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0) msgrcv(0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000002c0)) 2018/04/14 01:36:33 executing program 4: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)) 2018/04/14 01:36:33 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000002c0)=0xfffffffffffffffe, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000008, &(0x7f000066e000), 0x12c) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000383000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000482000), 0x0, 0x800000120000401, &(0x7f0000e45ff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) 2018/04/14 01:36:33 executing program 6: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x12013, r0, 0x0) syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) 2018/04/14 01:36:33 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='bridge0\x00', 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000000d}, 0x10) syzkaller login: [ 46.402603] ip (3787) used greatest stack depth: 54672 bytes left [ 46.745279] ip (3821) used greatest stack depth: 54408 bytes left [ 47.543626] ip (3901) used greatest stack depth: 53656 bytes left [ 47.970469] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.977088] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.010002] device bridge_slave_0 entered promiscuous mode [ 48.052915] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.059517] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.081495] device bridge_slave_0 entered promiscuous mode [ 48.093971] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.100493] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.118563] device bridge_slave_0 entered promiscuous mode [ 48.140619] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.147168] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.178674] device bridge_slave_0 entered promiscuous mode [ 48.195339] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.201837] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.218462] device bridge_slave_0 entered promiscuous mode [ 48.228220] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.234733] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.249910] device bridge_slave_0 entered promiscuous mode [ 48.272377] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.278856] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.287353] device bridge_slave_1 entered promiscuous mode [ 48.301120] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.307587] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.340528] device bridge_slave_0 entered promiscuous mode [ 48.349398] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.355849] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.372675] device bridge_slave_1 entered promiscuous mode [ 48.380932] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.387456] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.411933] device bridge_slave_1 entered promiscuous mode [ 48.418752] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.425272] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.435488] device bridge_slave_0 entered promiscuous mode [ 48.446331] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.452822] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.469098] device bridge_slave_1 entered promiscuous mode [ 48.485637] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 48.492794] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.499286] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.530215] device bridge_slave_1 entered promiscuous mode [ 48.537221] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.543688] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.572120] device bridge_slave_1 entered promiscuous mode [ 48.579685] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 48.588637] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.595121] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.643350] device bridge_slave_1 entered promiscuous mode [ 48.652195] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 48.667256] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 48.675118] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.683629] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.690138] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.728329] device bridge_slave_1 entered promiscuous mode [ 48.737885] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 48.782957] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.792346] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 48.835857] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 48.854580] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.881954] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.929550] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.949539] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 49.007591] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 49.045465] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 49.165076] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 49.704429] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 49.771765] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 49.855683] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 49.864690] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 49.932847] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.953954] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 49.967877] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 50.008572] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 50.024313] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 50.079968] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 50.099438] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 50.174399] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 50.193383] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 50.208564] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 50.261902] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 50.397880] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 50.835435] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.874832] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 51.028948] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 51.094749] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 51.152133] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 51.165681] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 51.200100] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 51.228677] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 51.244099] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 51.264438] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.271770] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.289900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.347135] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.354368] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.370839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.404283] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 51.417968] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 51.426287] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 51.433731] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 51.454222] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 51.486433] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 51.503459] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.514450] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.544202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.594481] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.601700] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.615939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.660799] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.668021] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.677375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.689730] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.697275] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 51.705100] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.713105] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.720374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.766830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.793921] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.820741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.838794] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.852829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.864989] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.886516] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.895935] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.904424] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.936487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.966142] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.993162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.017259] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.025642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.034746] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.042475] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.056749] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.079997] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.094304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.116014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.149212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.181843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.213939] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.240944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.248895] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.257098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.280361] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.296442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.328882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.977270] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.983785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.990637] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.997133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.051131] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.058128] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.087357] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.093859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.100744] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.107194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.120162] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.293695] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.300208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.307088] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.313566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.322571] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.337186] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.343755] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.351362] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.357809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.380795] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.526462] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.532967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.539861] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.546336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.584511] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.604141] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.610654] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.617517] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.623980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.708991] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.715814] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.722314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.729202] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.735675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.761893] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.772261] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.778744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.785681] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.792131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.800393] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 55.072672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.091013] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.126911] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.170690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.186911] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.202422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.209849] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.448163] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 63.553069] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 63.598002] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 63.635580] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 63.904303] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 63.969617] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 64.008543] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 64.069208] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 64.260346] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 64.266676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.278454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.333106] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 64.339382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.350000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.395583] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 64.405528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.433475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.455408] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 64.474335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.508659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.662071] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 64.668353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.676278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.844916] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 64.851253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.860578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.931511] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 64.937873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.951643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.979092] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 64.985615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.030894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/14 01:37:00 executing program 7: 2018/04/14 01:37:00 executing program 1: 2018/04/14 01:37:00 executing program 2: 2018/04/14 01:37:00 executing program 7: 2018/04/14 01:37:00 executing program 2: 2018/04/14 01:37:00 executing program 1: 2018/04/14 01:37:00 executing program 7: 2018/04/14 01:37:00 executing program 3: 2018/04/14 01:37:00 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000903000)={0x1, 0x5, &(0x7f0000519fa8)=ANY=[@ANYBLOB="1800000000000000000000000000ebff6a0a76ff000000002f000000000000009500000000000000"], &(0x7f0000001140)='syzkaller\x00', 0x8000, 0x1000, &(0x7f0000000140)=""/4096}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0xe, 0xbf, &(0x7f0000000000)="c0342367ba069bb1bc3c63182367", &(0x7f0000000040)=""/191}, 0x28) 2018/04/14 01:37:00 executing program 1: 2018/04/14 01:37:00 executing program 2: 2018/04/14 01:37:00 executing program 7: 2018/04/14 01:37:00 executing program 3: 2018/04/14 01:37:00 executing program 6: 2018/04/14 01:37:00 executing program 5: 2018/04/14 01:37:00 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000040)={0xa}, 0x1c) sendmsg(r0, &(0x7f0000009fc8)={0x0, 0x0, &(0x7f000002c000)=[{&(0x7f0000000080)=',', 0x1}], 0x1, &(0x7f0000021000)}, 0xc100) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000002b40)="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", 0x68f}], 0x1, &(0x7f0000003b40)}, 0x0) [ 70.983713] ================================================================== [ 70.991161] BUG: KMSAN: uninit-value in ipv6_destopt_rcv+0x3df/0xde0 [ 70.997660] CPU: 1 PID: 5797 Comm: syz-executor4 Not tainted 4.16.0+ #83 [ 71.004499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 71.013856] Call Trace: [ 71.016435] [ 71.018591] dump_stack+0x185/0x1d0 [ 71.022221] ? ipv6_destopt_rcv+0x3df/0xde0 [ 71.026538] kmsan_report+0x142/0x240 [ 71.030326] __msan_warning_32+0x6c/0xb0 [ 71.034374] ipv6_destopt_rcv+0x3df/0xde0 [ 71.038514] ? ipv6_rthdr_rcv+0x3ea0/0x3ea0 [ 71.042820] ip6_input_finish+0xa62/0x2110 [ 71.047049] ? ip6table_filter_hook+0xb5/0xe0 [ 71.051528] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 71.056878] ip6_input+0x294/0x320 [ 71.060400] ? ip6_input+0x320/0x320 [ 71.064096] ? ipv6_rcv+0x26d0/0x26d0 [ 71.067892] ipv6_rcv+0x20ec/0x26d0 [ 71.071515] ? local_bh_enable+0x40/0x40 [ 71.075568] __netif_receive_skb_core+0x47cf/0x4a80 [ 71.080564] ? kmsan_set_origin_inline+0x6b/0x120 [ 71.085390] ? kmsan_internal_memset_shadow_inline+0xd0/0xd0 [ 71.091173] ? ip6_rcv_finish+0x4d0/0x4d0 [ 71.095304] process_backlog+0x62d/0xe20 [ 71.099349] ? rps_trigger_softirq+0x2f0/0x2f0 [ 71.103909] net_rx_action+0x7c1/0x1a70 [ 71.107871] ? net_tx_action+0xab0/0xab0 [ 71.111914] __do_softirq+0x56d/0x93d [ 71.115744] do_softirq_own_stack+0x2a/0x40 [ 71.120045] [ 71.122267] __local_bh_enable_ip+0x114/0x140 [ 71.126748] local_bh_enable+0x36/0x40 [ 71.130620] ip6_finish_output2+0x1b6c/0x1f20 [ 71.135106] ip6_finish_output+0xb3f/0xc00 [ 71.139329] ip6_output+0x597/0x6c0 [ 71.142940] ? ip6_output+0x6c0/0x6c0 [ 71.146724] ? ac6_seq_show+0x200/0x200 [ 71.150687] ip6_local_out+0x573/0x640 [ 71.154555] ? __ip6_local_out+0x4f0/0x4f0 [ 71.158778] ip6_push_pending_frames+0x218/0x4d0 [ 71.163518] rawv6_sendmsg+0x4500/0x4cc0 [ 71.167565] ? kmsan_internal_unpoison_shadow+0x83/0xe0 [ 71.172913] ? rw_copy_check_uvector+0x5af/0x6c0 [ 71.177661] ? compat_rawv6_ioctl+0x30/0x30 [ 71.181962] inet_sendmsg+0x48d/0x740 [ 71.185743] ? security_socket_sendmsg+0x9e/0x210 [ 71.190565] ? inet_getname+0x500/0x500 [ 71.194521] ___sys_sendmsg+0xec0/0x1310 [ 71.198579] ? __fdget+0x4e/0x60 [ 71.201927] ? __fget_light+0x56/0x710 [ 71.205792] ? __fdget+0x4e/0x60 [ 71.209139] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 71.214481] ? __fget_light+0x6b9/0x710 [ 71.218444] SYSC_sendmsg+0x2a3/0x3d0 [ 71.222233] SyS_sendmsg+0x54/0x80 [ 71.225753] do_syscall_64+0x309/0x430 [ 71.229628] ? ___sys_sendmsg+0x1310/0x1310 [ 71.233934] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 71.239106] RIP: 0033:0x455319 [ 71.242277] RSP: 002b:00007f1ffd1f9c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 71.249968] RAX: ffffffffffffffda RBX: 00007f1ffd1fa6d4 RCX: 0000000000455319 [ 71.257366] RDX: 0000000000000000 RSI: 0000000020000a40 RDI: 0000000000000013 [ 71.264732] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 71.271980] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 71.279370] R13: 00000000000004cc R14: 00000000006fa3c0 R15: 0000000000000000 [ 71.286708] [ 71.288312] Uninit was stored to memory at: [ 71.292615] kmsan_internal_chain_origin+0x12b/0x210 [ 71.297701] kmsan_memcpy_origins+0x11d/0x170 [ 71.302188] __msan_memcpy+0x19f/0x1f0 [ 71.306059] skb_copy_bits+0x63a/0xdb0 [ 71.309926] __pskb_pull_tail+0x483/0x22e0 [ 71.314141] ipv6_destopt_rcv+0x660/0xde0 [ 71.318269] ip6_input_finish+0xa62/0x2110 [ 71.322483] ip6_input+0x294/0x320 [ 71.326003] ipv6_rcv+0x20ec/0x26d0 [ 71.329621] __netif_receive_skb_core+0x47cf/0x4a80 [ 71.334621] process_backlog+0x62d/0xe20 [ 71.338661] net_rx_action+0x7c1/0x1a70 [ 71.342619] __do_softirq+0x56d/0x93d [ 71.346393] Uninit was created at: [ 71.349913] kmsan_alloc_meta_for_pages+0x161/0x3a0 [ 71.354910] kmsan_alloc_page+0x82/0xe0 [ 71.358865] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 71.363599] alloc_pages_current+0x6b5/0x970 [ 71.367990] skb_page_frag_refill+0x3ba/0x5e0 [ 71.372467] sk_page_frag_refill+0xa4/0x340 [ 71.376770] __ip6_append_data+0x1a20/0x4bb0 [ 71.381158] ip6_append_data+0x40e/0x6b0 [ 71.385201] rawv6_sendmsg+0x2787/0x4cc0 [ 71.389243] inet_sendmsg+0x48d/0x740 [ 71.393028] ___sys_sendmsg+0xec0/0x1310 [ 71.397074] SYSC_sendmsg+0x2a3/0x3d0 [ 71.400854] SyS_sendmsg+0x54/0x80 [ 71.404371] do_syscall_64+0x309/0x430 [ 71.408240] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 71.413402] ================================================================== [ 71.420736] Disabling lock debugging due to kernel taint [ 71.426163] Kernel panic - not syncing: panic_on_warn set ... [ 71.426163] [ 71.433510] CPU: 1 PID: 5797 Comm: syz-executor4 Tainted: G B 4.16.0+ #83 [ 71.441632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 71.450966] Call Trace: [ 71.453528] [ 71.455661] dump_stack+0x185/0x1d0 [ 71.459273] panic+0x39d/0x940 [ 71.462461] ? ipv6_destopt_rcv+0x3df/0xde0 [ 71.466761] kmsan_report+0x238/0x240 [ 71.470542] __msan_warning_32+0x6c/0xb0 [ 71.474599] ipv6_destopt_rcv+0x3df/0xde0 [ 71.478745] ? ipv6_rthdr_rcv+0x3ea0/0x3ea0 [ 71.483052] ip6_input_finish+0xa62/0x2110 [ 71.487271] ? ip6table_filter_hook+0xb5/0xe0 [ 71.491747] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 71.497099] ip6_input+0x294/0x320 [ 71.500628] ? ip6_input+0x320/0x320 [ 71.504323] ? ipv6_rcv+0x26d0/0x26d0 [ 71.508105] ipv6_rcv+0x20ec/0x26d0 [ 71.511714] ? local_bh_enable+0x40/0x40 [ 71.515771] __netif_receive_skb_core+0x47cf/0x4a80 [ 71.520782] ? kmsan_set_origin_inline+0x6b/0x120 [ 71.525610] ? kmsan_internal_memset_shadow_inline+0xd0/0xd0 [ 71.531395] ? ip6_rcv_finish+0x4d0/0x4d0 [ 71.535523] process_backlog+0x62d/0xe20 [ 71.539568] ? rps_trigger_softirq+0x2f0/0x2f0 [ 71.544139] net_rx_action+0x7c1/0x1a70 [ 71.548100] ? net_tx_action+0xab0/0xab0 [ 71.552146] __do_softirq+0x56d/0x93d [ 71.555932] do_softirq_own_stack+0x2a/0x40 [ 71.560228] [ 71.562450] __local_bh_enable_ip+0x114/0x140 [ 71.566929] local_bh_enable+0x36/0x40 [ 71.570800] ip6_finish_output2+0x1b6c/0x1f20 [ 71.575285] ip6_finish_output+0xb3f/0xc00 [ 71.579506] ip6_output+0x597/0x6c0 [ 71.583118] ? ip6_output+0x6c0/0x6c0 [ 71.586905] ? ac6_seq_show+0x200/0x200 [ 71.590864] ip6_local_out+0x573/0x640 [ 71.594732] ? __ip6_local_out+0x4f0/0x4f0 [ 71.598953] ip6_push_pending_frames+0x218/0x4d0 [ 71.603691] rawv6_sendmsg+0x4500/0x4cc0 [ 71.607748] ? kmsan_internal_unpoison_shadow+0x83/0xe0 [ 71.613096] ? rw_copy_check_uvector+0x5af/0x6c0 [ 71.617843] ? compat_rawv6_ioctl+0x30/0x30 [ 71.622145] inet_sendmsg+0x48d/0x740 [ 71.625927] ? security_socket_sendmsg+0x9e/0x210 [ 71.630753] ? inet_getname+0x500/0x500 [ 71.634710] ___sys_sendmsg+0xec0/0x1310 [ 71.638758] ? __fdget+0x4e/0x60 [ 71.642105] ? __fget_light+0x56/0x710 [ 71.645983] ? __fdget+0x4e/0x60 [ 71.649333] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 71.654675] ? __fget_light+0x6b9/0x710 [ 71.658642] SYSC_sendmsg+0x2a3/0x3d0 [ 71.662433] SyS_sendmsg+0x54/0x80 [ 71.665953] do_syscall_64+0x309/0x430 [ 71.669824] ? ___sys_sendmsg+0x1310/0x1310 [ 71.674132] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 71.679303] RIP: 0033:0x455319 [ 71.682472] RSP: 002b:00007f1ffd1f9c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 71.690159] RAX: ffffffffffffffda RBX: 00007f1ffd1fa6d4 RCX: 0000000000455319 [ 71.697408] RDX: 0000000000000000 RSI: 0000000020000a40 RDI: 0000000000000013 [ 71.704657] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 71.711905] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 71.719154] R13: 00000000000004cc R14: 00000000006fa3c0 R15: 0000000000000000 [ 71.727011] Dumping ftrace buffer: [ 71.730529] (ftrace buffer empty) [ 71.734211] Kernel Offset: disabled [ 71.737809] Rebooting in 86400 seconds..