INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.9' (ECDSA) to the list of known hosts. 2018/04/18 20:24:34 fuzzer started 2018/04/18 20:24:34 dialing manager at 10.128.0.26:44151 2018/04/18 20:24:40 kcov=true, comps=false 2018/04/18 20:24:43 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0xfffffffffffffeff, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x0, 0x20000000001, 0x0, 0x0, 0x3e}, 0x0) pwritev(r0, &(0x7f0000002640)=[{&(0x7f0000000400)='!', 0x1}], 0x1, 0x0) ftruncate(r0, 0xc) 2018/04/18 20:24:43 executing program 2: getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={0x0, 0x186}, &(0x7f0000000380)=0x8) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000600), 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) epoll_create1(0x0) socket$rds(0x15, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000f24000)) close(0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10}, 0xb06a, &(0x7f0000000200)={&(0x7f0000000140)={0x14}, 0x14}, 0x1}, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000000)=@un=@abs, &(0x7f0000000180)=0x80, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000003c0), 0x0) listen(0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000030000)={&(0x7f00004f5000)=@generic={0x0, "0100000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000447ff0), 0x0, &(0x7f00006e9c68)}, 0x0) accept$ipx(0xffffffffffffffff, &(0x7f00000004c0), &(0x7f00000001c0)=0xee) 2018/04/18 20:24:43 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x18071, 0xffffffffffffffff, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000340)) 2018/04/18 20:24:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x400000000e) ioctl$TCFLSH(r0, 0x80047456, 0x0) 2018/04/18 20:24:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000d379)={&(0x7f0000013db4)={0x14, 0x1e, 0x2ff}, 0x14}, 0x1}, 0x0) 2018/04/18 20:24:43 executing program 5: 2018/04/18 20:24:43 executing program 6: 2018/04/18 20:24:43 executing program 4: syzkaller login: [ 42.258854] ip (3760) used greatest stack depth: 54672 bytes left [ 42.779278] ip (3809) used greatest stack depth: 54072 bytes left [ 43.658383] ip (3896) used greatest stack depth: 53656 bytes left [ 44.061690] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.068250] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.104167] device bridge_slave_0 entered promiscuous mode [ 44.148249] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.154759] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.181439] device bridge_slave_0 entered promiscuous mode [ 44.223710] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.230222] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.251597] device bridge_slave_0 entered promiscuous mode [ 44.270195] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.276703] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.306864] device bridge_slave_0 entered promiscuous mode [ 44.329202] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.335809] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.355845] device bridge_slave_0 entered promiscuous mode [ 44.370867] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.377347] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.390683] device bridge_slave_0 entered promiscuous mode [ 44.404791] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.411310] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.431210] device bridge_slave_1 entered promiscuous mode [ 44.438396] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.444871] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.468451] device bridge_slave_1 entered promiscuous mode [ 44.477078] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.483587] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.502164] device bridge_slave_0 entered promiscuous mode [ 44.510884] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.517489] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.528337] device bridge_slave_0 entered promiscuous mode [ 44.535738] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.542235] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.551763] device bridge_slave_1 entered promiscuous mode [ 44.567961] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.574469] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.598378] device bridge_slave_1 entered promiscuous mode [ 44.617279] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.623753] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.633877] device bridge_slave_1 entered promiscuous mode [ 44.647715] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.657799] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.665515] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.672068] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.705273] device bridge_slave_1 entered promiscuous mode [ 44.712551] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.719026] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.752344] device bridge_slave_1 entered promiscuous mode [ 44.763102] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.776686] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.783186] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.824127] device bridge_slave_1 entered promiscuous mode [ 44.838976] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.848851] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.858980] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.878343] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.890922] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.939161] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.981144] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.012266] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.075980] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.083358] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.094485] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.219333] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.340333] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.832636] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.905398] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.924855] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.969399] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.022108] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.088479] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.114212] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.136086] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.148355] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.169388] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.183290] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.340866] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.355181] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.366419] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.444826] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.658446] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.012523] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.027543] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.158991] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.222514] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.244737] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.257988] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.304774] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.380324] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.398641] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.420634] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.448414] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.482595] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.490979] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.509548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.548092] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.555347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.564268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.603221] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.633643] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.641901] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.649751] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.668527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.697572] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.705017] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.718276] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.725541] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.757968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.796126] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.803722] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.810988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.842256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.858478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.867406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.892248] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.899893] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.908666] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.915748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.968642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.990277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.004788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.012940] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.021927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.030696] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.040105] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.047352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.065256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.086175] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.093389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.125696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.157605] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.170913] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.186584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.223580] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.245065] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.259774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.282672] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.296143] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.326397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.362852] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.370398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.386819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.604387] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.611576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.620522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.225260] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.231767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.238669] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.245173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.301162] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.309200] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.325267] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.331787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.338701] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.345185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.360131] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.370001] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.376527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.383395] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.389846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.401847] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.460535] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.467107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.473979] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.480469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.569012] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.593317] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.599798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.606638] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.613126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.624699] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.632566] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.639078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.645938] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.652430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.708930] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.917930] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.924438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.931318] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.937800] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.991227] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.089000] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.095545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.102443] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.108931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.153796] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.360199] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.373875] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.395710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.403800] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.412216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.421208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.430127] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.689155] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.754448] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.981237] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.099880] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.136836] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.145092] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.497563] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.503826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.514821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.555254] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.575154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.590652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.643878] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.709693] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.715955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.729689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.765308] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.909879] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.916179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.930674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.009966] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.016263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.028185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.070554] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.076855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.088658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.564959] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.571280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.583439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.624302] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.630600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.645450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/18 20:25:10 executing program 4: 2018/04/18 20:25:11 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000cc5000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x0, "02ff01000000010000000000000007e77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, &(0x7f0000000040), 0x0, &(0x7f000012e000)}, 0x0) r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x3fd, @time={0x77359400}}], 0x1c) 2018/04/18 20:25:11 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000400)={@dev={0xfe, 0x80}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000], 0x1}, @local={0xfe, 0x80, [], 0xaa}, 0x0, 0x40}) 2018/04/18 20:25:11 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x4000009d}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0xf, 0x6f2000, 0x1, &(0x7f00000001c0)) 2018/04/18 20:25:11 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x3ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) syz_mount_image$ntfs(&(0x7f0000000440)='ntfs\x00', &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, &(0x7f00000005c0), 0x1000, &(0x7f00000006c0)=ANY=[]) r0 = open(&(0x7f0000002000)='./bus\x00', 0x145042, 0x0) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x7, 0x11, r0, 0x0) 2018/04/18 20:25:11 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000040)=0x11, 0x4) 2018/04/18 20:25:11 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000ea7cfa)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60c000e20003040000000000000000000000ffefac14ffaa327b1d000000000000"], 0x0) 2018/04/18 20:25:11 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fc9000)={0x1, 0x9, 0x800000209e1f, 0x8000000001}, 0x188) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, &(0x7f00000000c0), &(0x7f0000000140)=""/67}, 0x18) 2018/04/18 20:25:11 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000540)="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") fgetxattr(r0, &(0x7f00000000c0)=@known='user.syz\x00', &(0x7f0000000040), 0x382) 2018/04/18 20:25:11 executing program 2: 2018/04/18 20:25:11 executing program 6: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, 0x0}) get_robust_list(r1, &(0x7f0000000140)=&(0x7f0000000100)={&(0x7f0000000080)={&(0x7f0000000040)}, 0x0, &(0x7f00000000c0)}, &(0x7f0000000180)=0xc) 2018/04/18 20:25:11 executing program 4: 2018/04/18 20:25:11 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000040)=0x11, 0x4) 2018/04/18 20:25:11 executing program 3: 2018/04/18 20:25:11 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x3ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) syz_mount_image$ntfs(&(0x7f0000000440)='ntfs\x00', &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, &(0x7f00000005c0), 0x1000, &(0x7f00000006c0)=ANY=[]) r0 = open(&(0x7f0000002000)='./bus\x00', 0x145042, 0x0) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x7, 0x11, r0, 0x0) 2018/04/18 20:25:11 executing program 1: 2018/04/18 20:25:11 executing program 2: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f000039cfe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) accept4(r1, &(0x7f00000001c0)=@in6={0x0, 0x0, 0x0, @local}, &(0x7f0000000000)=0x80, 0x0) sendto$inet6(r0, &(0x7f0000c7a000), 0x6d8f71a, 0x20000004, &(0x7f00005f0fe4)={0xa, 0x4e22, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}, 0x1c) 2018/04/18 20:25:11 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000cc5000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x0, "02ff01000000010000000000000007e77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, &(0x7f0000000040), 0x0, &(0x7f000012e000)}, 0x0) r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) dup2(r2, r1) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x3fd, @time={0x77359400}}], 0x1c) 2018/04/18 20:25:11 executing program 3: 2018/04/18 20:25:11 executing program 4: 2018/04/18 20:25:11 executing program 1: modify_ldt$write(0x1, &(0x7f0000000000), 0x10) modify_ldt$write(0x1, &(0x7f00000001c0), 0x10) 2018/04/18 20:25:11 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000074b000)={@ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}, 0x20) 2018/04/18 20:25:11 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x3ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) syz_mount_image$ntfs(&(0x7f0000000440)='ntfs\x00', &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, &(0x7f00000005c0), 0x1000, &(0x7f00000006c0)=ANY=[]) r0 = open(&(0x7f0000002000)='./bus\x00', 0x145042, 0x0) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x7, 0x11, r0, 0x0) 2018/04/18 20:25:11 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000001c0)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000240)={'bridge0\x00', 0x9000}) r2 = socket$packet(0x11, 0x80000000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r4 = accept4$inet(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, @loopback}, &(0x7f0000000cc0)=0x10, 0x800) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000700)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x80000001}}, 0x9, 0x7fff, 0xab4, 0x9, 0x11}, &(0x7f0000000400)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000100)={r5, 0x2}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000300)=@assoc_id=r6, &(0x7f0000000580)) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f00000002c0)={'ip6_vti0\x00', {0x2, 0x4e1f, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000380)) r7 = accept4(r2, &(0x7f00000010c0)=@nl=@unspec, &(0x7f0000001140)=0x80, 0x80800) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x6c, &(0x7f00000013c0)=ANY=[@ANYRES32, @ANYPTR64=&(0x7f0000001180)=ANY=[@ANYRES32=r0], @ANYBLOB="1e5828e32b7940"], &(0x7f0000001400)=0x3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000c80)='IPVS\x00') ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000340)={'ip6gre0\x00', {0x2, 0x4e20, @loopback=0x7f000001}}) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f00000006c0)=@add_del={0x2, &(0x7f0000000e40)='tunl0\x00', 0xcb}) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000900)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, &(0x7f0000000e80)=ANY=[@ANYRES32=r4, @ANYBLOB="f40563703fa2c0f19e74cc8b10e7ff437f31c94cc400bb2fabe8b271b263488c8e4b77532c584aa4510015678961a63431e799f4ed911e0ceb83375a65c11f957176200f0596ab3d381d4ae66d9a78283dd08d6821a0c8d4ff22593b112c4670c0b507c0ba328776efa7dfbf008b5691a35deae695d023b9114a242956020532ac2f6e5b7ef837a0830e726847360e7c631ead381c6f696a241c111c43fc335cc88b606114b9a4cfea87224988d0f00b37866519948fa2a1dd2a864f6121c1ac7e09e7356d9ac18555ae009c5bbac5eaad9041d7a196eb377c5fba679af7582f6c5eed773811f4"], &(0x7f0000000940)=0x2) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000005c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1010000}, 0xc, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[]}, 0x1, 0x0, 0x0, 0x400000080}, 0xa000) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r8, 0x84, 0x78, &(0x7f0000000280), 0xffffffffffffff67) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0xffffff89, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x13}}, 0xfda9) socket$inet_sctp(0x2, 0x200008, 0x84) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000980)='gre0\x00') ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000480)='bridge0\x00') getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f00000000c0), &(0x7f00000007c0)=0x4) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000840)=0x5, &(0x7f0000000600)=0x4) accept(0xffffffffffffffff, &(0x7f0000000140)=@pptp={0x0, 0x0, {0x0, @rand_addr}}, &(0x7f00000001c0)=0x80) getsockopt$inet_mtu(r9, 0x0, 0xa, &(0x7f00000004c0), &(0x7f0000000540)=0x85aa336efdf9314b) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@remote={0xfe, 0x80, [], 0xbb}, r3}, 0x14) sendmmsg$nfc_llcp(0xffffffffffffffff, &(0x7f00000043c0)=[{&(0x7f0000000040)={0x27, 0x1, 0x0, 0x3, 0x7, 0x1, "25d08a89aae8837f726687326421747920ae1968e20cd373699fd8daea2d68bf7ee425535bff91167faa35b33054f80bdbebfd95e453d17a63c514ad40b02b", 0x16}, 0x60, &(0x7f00000000c0), 0x0, &(0x7f0000001240)={0xb0, 0x29, 0x1, "c856447c43748e4b7112fbd6dcacf345c3da8d1c3b31876aac8d62bdc910a4c41a17616e86517a58ae7109149de5455d84b215ca79e5859f61c5a5fb8e60d4a77e6a8ac419bf69b5cfb60981c47188e4ab860c913ee7968bee91b22e1c8f3dcf5b3852f46e5c32eb4ebc73ec1317f23b3016570b6c883d972b18816fc67d4d17a97e766d61c14cf0d8eac1f300046b746f5283a1adaa78559779"}, 0xb0}], 0x1, 0x4800) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f00000003c0)) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f00000008c0)={'ip6_vti0\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}}) 2018/04/18 20:25:11 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000039000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000009fc8)={0x0, 0x0, &(0x7f000002c000)=[{&(0x7f0000000000)=',', 0x1}], 0x1, &(0x7f0000021000)}, 0xc100) write$binfmt_elf32(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x451) [ 67.845691] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.852689] bridge0: port 1(bridge_slave_0) entered disabled state 2018/04/18 20:25:11 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x3f) [ 67.903643] ================================================================== [ 67.911068] BUG: KMSAN: uninit-value in ipv6_destopt_rcv+0x3df/0xde0 [ 67.917565] CPU: 1 PID: 5846 Comm: syz-executor0 Not tainted 4.16.0+ #84 [ 67.924410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 67.933767] Call Trace: [ 67.936351] [ 67.938518] dump_stack+0x185/0x1d0 [ 67.942158] ? ipv6_destopt_rcv+0x3df/0xde0 [ 67.946481] kmsan_report+0x142/0x240 [ 67.950291] __msan_warning_32+0x6c/0xb0 [ 67.954366] ipv6_destopt_rcv+0x3df/0xde0 [ 67.958530] ? ipv6_rthdr_rcv+0x3ea0/0x3ea0 [ 67.962858] ip6_input_finish+0xa62/0x2110 [ 67.967103] ? ip6table_filter_hook+0xb5/0xe0 [ 67.971609] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 67.976983] ip6_mc_input+0x697/0x740 [ 67.980804] ? ip6_input+0x320/0x320 [ 67.984534] ? ip6_input_finish+0x2110/0x2110 [ 67.989040] ipv6_rcv+0x20ec/0x26d0 [ 67.992670] ? local_bh_enable+0x40/0x40 [ 67.996836] __netif_receive_skb_core+0x47cf/0x4a80 [ 68.001862] ? try_to_wake_up+0x1ab2/0x20a0 [ 68.006199] ? kmsan_internal_memset_shadow_inline+0xc0/0xd0 [ 68.012017] ? ip6_rcv_finish+0x4d0/0x4d0 [ 68.016175] process_backlog+0x62d/0xe20 [ 68.020253] ? rps_trigger_softirq+0x2f0/0x2f0 [ 68.024840] net_rx_action+0x7c1/0x1a70 [ 68.028826] ? net_tx_action+0xab0/0xab0 [ 68.032985] __do_softirq+0x56d/0x93d [ 68.036800] do_softirq_own_stack+0x2a/0x40 [ 68.041115] [ 68.043361] do_softirq+0xb6/0xf0 [ 68.046823] dev_loopback_xmit+0x8b0/0x900 2018/04/18 20:25:12 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x3f) [ 68.051154] ip6_finish_output2+0x5e6/0x1f20 [ 68.055570] ? validate_xmit_skb+0x1320/0x1320 [ 68.060174] ip6_finish_output+0xb3f/0xc00 [ 68.064421] ip6_output+0x597/0x6c0 [ 68.068145] ? ip6_output+0x6c0/0x6c0 [ 68.071960] ? ac6_seq_show+0x200/0x200 [ 68.075942] ip6_local_out+0x573/0x640 [ 68.079839] ? __ip6_local_out+0x4f0/0x4f0 [ 68.084173] ip6_push_pending_frames+0x218/0x4d0 [ 68.088936] rawv6_sendmsg+0x4500/0x4cc0 [ 68.092998] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 68.098454] ? futex_wait_queue_me+0x687/0x710 [ 68.103058] ? compat_rawv6_ioctl+0x30/0x30 [ 68.107385] inet_sendmsg+0x48d/0x740 [ 68.111187] ? security_socket_sendmsg+0x9e/0x210 [ 68.116060] ? inet_getname+0x500/0x500 [ 68.120041] sock_write_iter+0x3b9/0x470 [ 68.124115] ? sock_read_iter+0x480/0x480 [ 68.128263] __vfs_write+0x719/0x910 [ 68.131988] vfs_write+0x463/0x8d0 [ 68.135537] SYSC_write+0x172/0x360 [ 68.139171] SyS_write+0x55/0x80 [ 68.142539] do_syscall_64+0x309/0x430 [ 68.146432] ? SYSC_read+0x360/0x360 2018/04/18 20:25:12 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_int(r0, 0x1, 0x26, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 68.150148] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 68.155354] RIP: 0033:0x455329 [ 68.158541] RSP: 002b:00007f0a80f22c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 68.166248] RAX: ffffffffffffffda RBX: 00007f0a80f236d4 RCX: 0000000000455329 [ 68.173515] RDX: 0000000000000451 RSI: 00000000200007c0 RDI: 0000000000000013 [ 68.180780] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 68.188047] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 68.195408] R13: 00000000000006b8 R14: 00000000006fd1e0 R15: 0000000000000000 [ 68.202677] 2018/04/18 20:25:12 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f00000002c0), 0x0, 0x200007ff, &(0x7f0000000280)={0x2, 0x4e23}, 0x10) r1 = dup(r0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000240)='vegas\x00', 0x6) writev(r0, &(0x7f0000df9000)=[{&(0x7f0000354ff8)='\'', 0x1}], 0x1) 2018/04/18 20:25:12 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000360000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000033c000)={0x2, 0xf, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002980)=[{{&(0x7f0000000500)=@ethernet={0x0, @remote}, 0x80, &(0x7f00000017c0)=[{&(0x7f00000016c0)=""/245, 0xf5}], 0x1, &(0x7f0000001800)=""/182, 0xb6}}, {{&(0x7f00000018c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001940), 0x2000000000000262, &(0x7f0000001980)=""/4096, 0x1000}}], 0x2, 0x22, 0x0) [ 68.204294] Uninit was stored to memory at: [ 68.208616] kmsan_internal_chain_origin+0x12b/0x210 [ 68.213718] kmsan_memcpy_origins+0x11d/0x170 [ 68.218210] __msan_memcpy+0x19f/0x1f0 [ 68.222099] skb_copy_bits+0x63a/0xdb0 [ 68.225981] __pskb_pull_tail+0x483/0x22e0 [ 68.230213] ipv6_destopt_rcv+0x660/0xde0 [ 68.234361] ip6_input_finish+0xa62/0x2110 [ 68.238592] ip6_mc_input+0x697/0x740 [ 68.242394] ipv6_rcv+0x20ec/0x26d0 [ 68.246022] __netif_receive_skb_core+0x47cf/0x4a80 [ 68.251037] process_backlog+0x62d/0xe20 [ 68.255099] net_rx_action+0x7c1/0x1a70 [ 68.259070] __do_softirq+0x56d/0x93d [ 68.262860] Uninit was created at: [ 68.266400] kmsan_alloc_meta_for_pages+0x161/0x3a0 [ 68.271416] kmsan_alloc_page+0x82/0xe0 [ 68.275393] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 68.280150] alloc_pages_current+0x6b5/0x970 [ 68.284559] skb_page_frag_refill+0x3ba/0x5e0 [ 68.289062] sk_page_frag_refill+0xa4/0x340 [ 68.293387] __ip6_append_data+0x1a20/0x4bb0 [ 68.297792] ip6_append_data+0x40e/0x6b0 [ 68.301863] rawv6_sendmsg+0x2787/0x4cc0 [ 68.305926] inet_sendmsg+0x48d/0x740 [ 68.309744] sock_write_iter+0x3b9/0x470 [ 68.313819] __vfs_write+0x719/0x910 [ 68.317559] vfs_write+0x463/0x8d0 [ 68.321099] SYSC_write+0x172/0x360 [ 68.324729] SyS_write+0x55/0x80 [ 68.328097] do_syscall_64+0x309/0x430 [ 68.331997] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 68.337176] ================================================================== [ 68.344530] Disabling lock debugging due to kernel taint [ 68.349971] Kernel panic - not syncing: panic_on_warn set ... [ 68.349971] [ 68.357334] CPU: 1 PID: 5846 Comm: syz-executor0 Tainted: G B 4.16.0+ #84 [ 68.365477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 68.374843] Call Trace: [ 68.377431] [ 68.379596] dump_stack+0x185/0x1d0 [ 68.383223] panic+0x39d/0x940 [ 68.386432] ? ipv6_destopt_rcv+0x3df/0xde0 [ 68.390754] kmsan_report+0x238/0x240 [ 68.394567] __msan_warning_32+0x6c/0xb0 [ 68.398626] ipv6_destopt_rcv+0x3df/0xde0 2018/04/18 20:25:12 executing program 6: [ 68.402964] ? ipv6_rthdr_rcv+0x3ea0/0x3ea0 [ 68.407290] ip6_input_finish+0xa62/0x2110 [ 68.411534] ? ip6table_filter_hook+0xb5/0xe0 [ 68.416033] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 68.421403] ip6_mc_input+0x697/0x740 [ 68.425205] ? ip6_input+0x320/0x320 [ 68.428919] ? ip6_input_finish+0x2110/0x2110 [ 68.433413] ipv6_rcv+0x20ec/0x26d0 [ 68.437046] ? local_bh_enable+0x40/0x40 [ 68.441121] __netif_receive_skb_core+0x47cf/0x4a80 [ 68.446147] ? try_to_wake_up+0x1ab2/0x20a0 [ 68.450471] ? kmsan_internal_memset_shadow_inline+0xc0/0xd0 [ 68.456278] ? ip6_rcv_finish+0x4d0/0x4d0 [ 68.460433] process_backlog+0x62d/0xe20 [ 68.464504] ? rps_trigger_softirq+0x2f0/0x2f0 [ 68.469094] net_rx_action+0x7c1/0x1a70 [ 68.473074] ? net_tx_action+0xab0/0xab0 [ 68.477142] __do_softirq+0x56d/0x93d [ 68.480953] do_softirq_own_stack+0x2a/0x40 [ 68.485262] [ 68.487500] do_softirq+0xb6/0xf0 [ 68.490957] dev_loopback_xmit+0x8b0/0x900 [ 68.495227] ip6_finish_output2+0x5e6/0x1f20 [ 68.499631] ? validate_xmit_skb+0x1320/0x1320 2018/04/18 20:25:12 executing program 6: [ 68.504224] ip6_finish_output+0xb3f/0xc00 [ 68.508465] ip6_output+0x597/0x6c0 [ 68.512092] ? ip6_output+0x6c0/0x6c0 [ 68.515893] ? ac6_seq_show+0x200/0x200 [ 68.519866] ip6_local_out+0x573/0x640 [ 68.523758] ? __ip6_local_out+0x4f0/0x4f0 [ 68.527997] ip6_push_pending_frames+0x218/0x4d0 [ 68.532756] rawv6_sendmsg+0x4500/0x4cc0 [ 68.536818] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 68.542274] ? futex_wait_queue_me+0x687/0x710 [ 68.546873] ? compat_rawv6_ioctl+0x30/0x30 [ 68.551193] inet_sendmsg+0x48d/0x740 [ 68.554996] ? security_socket_sendmsg+0x9e/0x210 [ 68.559852] ? inet_getname+0x500/0x500 [ 68.563917] sock_write_iter+0x3b9/0x470 [ 68.567986] ? sock_read_iter+0x480/0x480 [ 68.572148] __vfs_write+0x719/0x910 [ 68.575950] vfs_write+0x463/0x8d0 [ 68.579495] SYSC_write+0x172/0x360 [ 68.583134] SyS_write+0x55/0x80 [ 68.586499] do_syscall_64+0x309/0x430 [ 68.590391] ? SYSC_read+0x360/0x360 [ 68.594106] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 68.599381] RIP: 0033:0x455329 [ 68.602565] RSP: 002b:00007f0a80f22c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 68.610270] RAX: ffffffffffffffda RBX: 00007f0a80f236d4 RCX: 0000000000455329 [ 68.617539] RDX: 0000000000000451 RSI: 00000000200007c0 RDI: 0000000000000013 [ 68.624808] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 68.632084] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 68.639362] R13: 00000000000006b8 R14: 00000000006fd1e0 R15: 0000000000000000 [ 68.645756] device bridge_slave_1 left promiscuous mode [ 68.647266] Dumping ftrace buffer: [ 68.647270] (ftrace buffer empty) [ 68.647273] Kernel Offset: disabled [ 68.663413] Rebooting in 86400 seconds..