INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.17' (ECDSA) to the list of known hosts. 2018/04/20 17:14:13 fuzzer started 2018/04/20 17:14:13 dialing manager at 10.128.0.26:40315 2018/04/20 17:14:19 kcov=true, comps=false 2018/04/20 17:14:22 executing program 0: r0 = socket(0x2000000000a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@empty, @mcast1={0xff, 0x1, [], 0x1}, @loopback={0x40000000, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803ffdfe, r1}) 2018/04/20 17:14:22 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x80002000080a01, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @time, {0x81, 0x10001}, {}, @raw32}], 0x1c) 2018/04/20 17:14:22 executing program 7: r0 = socket$inet(0x2, 0x80a, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000180)=[{0x6}]}, 0x10) 2018/04/20 17:14:22 executing program 1: request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000100)='/selinux/mls\x00', 0xffffffffffffffff) getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000ec0), &(0x7f0000000f00)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000f40), &(0x7f0000000f80)=0xc) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000fc0)) getresgid(&(0x7f0000001000), &(0x7f0000001040), &(0x7f0000001080)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000010c0), &(0x7f0000001100)=0xc) stat(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000002900)) getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002940), &(0x7f0000002980)=0xc) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000029c0)) getresgid(&(0x7f0000002a00), &(0x7f0000002a40), &(0x7f0000002a80)) gettid() fstat(0xffffffffffffffff, &(0x7f0000002ac0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002b40)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0), &(0x7f0000000480)=0xc) getpid() getgid() getpid() getresgid(&(0x7f0000002ec0), &(0x7f0000002f00), &(0x7f0000002f40)) 2018/04/20 17:14:22 executing program 4: 2018/04/20 17:14:22 executing program 3: 2018/04/20 17:14:22 executing program 5: 2018/04/20 17:14:22 executing program 6: syzkaller login: [ 42.225228] ip (3788) used greatest stack depth: 54408 bytes left [ 42.399996] ip (3806) used greatest stack depth: 54312 bytes left [ 43.272247] ip (3894) used greatest stack depth: 54200 bytes left [ 43.351188] ip (3899) used greatest stack depth: 53960 bytes left [ 43.699879] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.706360] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.738463] device bridge_slave_0 entered promiscuous mode [ 43.787840] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.794294] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.823957] device bridge_slave_0 entered promiscuous mode [ 43.835155] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.841637] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.853737] device bridge_slave_0 entered promiscuous mode [ 43.866720] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.873165] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.888911] device bridge_slave_0 entered promiscuous mode [ 43.903784] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.910238] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.925799] device bridge_slave_0 entered promiscuous mode [ 43.942272] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.948744] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.960482] device bridge_slave_1 entered promiscuous mode [ 43.970532] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.976976] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.003287] device bridge_slave_0 entered promiscuous mode [ 44.018014] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.024502] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.035789] device bridge_slave_0 entered promiscuous mode [ 44.050953] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.057404] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.070804] device bridge_slave_1 entered promiscuous mode [ 44.078440] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.084902] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.100746] device bridge_slave_0 entered promiscuous mode [ 44.118909] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.125354] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.142903] device bridge_slave_1 entered promiscuous mode [ 44.152553] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.163670] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.170137] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.203232] device bridge_slave_1 entered promiscuous mode [ 44.218291] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.224735] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.244489] device bridge_slave_1 entered promiscuous mode [ 44.264407] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.270857] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.278639] device bridge_slave_1 entered promiscuous mode [ 44.285408] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.291828] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.301642] device bridge_slave_1 entered promiscuous mode [ 44.318881] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.328786] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.336408] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.342881] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.352304] device bridge_slave_1 entered promiscuous mode [ 44.359267] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.366706] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.396000] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.483760] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.523427] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.532579] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.544784] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.553632] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.563960] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.632949] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.688320] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.734459] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.750701] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.354139] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.554209] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.561653] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.572427] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.581616] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.648390] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.659311] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.741998] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.749867] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.785579] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.805150] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.814649] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.832552] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.875586] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.988549] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.025671] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.547166] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.749591] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.757321] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.780335] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 46.806315] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.859397] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.878823] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.901412] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.974078] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 46.984372] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.005145] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.012310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.023760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.073138] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.080949] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.089155] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.100399] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.120342] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.161922] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.170454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.185741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.234406] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.241547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.268155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.281078] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.288667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.305745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.330866] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.341249] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.355869] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.368706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.388231] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.396359] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.404600] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.415991] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.423772] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.475249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.496619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.511774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.528852] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.544722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.554925] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.562722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.581502] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.588770] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.596982] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.617820] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.627741] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.638062] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.645482] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.653760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.672268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.703695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.743227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.766612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.783695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.798678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.806534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.814964] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.822268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.830867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.023700] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.031020] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.042913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.811162] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.817653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.824481] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.830920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.886510] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 49.894144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.914894] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.921355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.928224] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.934837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.944510] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 49.960955] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.967439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.974312] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.980772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.022245] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.033755] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.040234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.047128] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.053590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.082899] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.089762] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.096235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.103108] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.109590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.149994] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.157354] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.163799] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.170586] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.177071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.186000] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.208305] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.214789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.221716] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.228173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.336920] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.378217] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.384713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.391586] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.398077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.417121] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.911558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.925203] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.951645] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.964937] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.980509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.988747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.996869] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.260187] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.361548] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.390892] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.454253] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.473849] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.583852] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.706722] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.753359] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.041689] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.050106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.066662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.157187] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.163438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.174350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.216259] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.222489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.231795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.292881] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.299153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.314577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.340544] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.356213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.375899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.424687] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.431667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.448560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.501593] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.507913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.522990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.628951] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.635304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.644961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/20 17:14:48 executing program 4: 2018/04/20 17:14:48 executing program 5: [ 65.936476] syz-executor7 uses obsolete (PF_INET,SOCK_PACKET) 2018/04/20 17:14:49 executing program 4: 2018/04/20 17:14:49 executing program 0: r0 = socket(0x2000000000a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@empty, @mcast1={0xff, 0x1, [], 0x1}, @loopback={0x40000000, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803ffdfe, r1}) 2018/04/20 17:14:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=@ipv6_delroute={0x30, 0x19, 0x101, 0x0, 0x0, {0xa}, [@RTA_GATEWAY={0x14, 0x5, @remote={0xfe, 0x80, [], 0xbb}}]}, 0x30}, 0x1}, 0x0) 2018/04/20 17:14:49 executing program 5: 2018/04/20 17:14:49 executing program 7: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$getenv(0x4201, r1, 0x0, &(0x7f0000000480)) 2018/04/20 17:14:49 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000500100000c000000000000000000000004000000000002000020000020000000d15bbe5ad25bbe5a0100ffff53ef010001000000cf5bbe5a000000000000000001", 0x4d, 0x400}], 0x0, &(0x7f0000013000)) 2018/04/20 17:14:49 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x80002000080a01, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @time, {0x81, 0x10001}, {}, @raw32}], 0x1c) 2018/04/20 17:14:49 executing program 6: r0 = gettid() r1 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000134000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) connect$inet(r1, &(0x7f00000e5000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) connect$inet(r1, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) connect$inet(r1, &(0x7f00000dcff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) tkill(r0, 0x1000000000016) socketpair$inet_sctp(0x2, 0x0, 0x84, &(0x7f0000000000)) 2018/04/20 17:14:49 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000040), &(0x7f00000000c0)=0xc) 2018/04/20 17:14:49 executing program 5: socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000100)=0x3) r1 = perf_event_open(&(0x7f0000012000)={0x2, 0x70, 0xfffffffffffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') finit_module(r1, &(0x7f0000000140)='md5sum\x00', 0x1) 2018/04/20 17:14:49 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)="2f65786500000000000090d8b75e67e16b394342abb5158df87ea8984e79c93df7498b2b34796068700e29fbd789f9a031f23e16c96e30baed2961953b057f7a3222943acc4b8cfa4de553f8276731ddeb811efd44ea011e1a0db9074a28a826c88566b89c57cc3cca4aec41d37fa27c8daa19030d03139d0aea71d509d9a20ba7deceb656cc1308d9d1f111b6bd1595486f55e229923be4ed8cbfb78e86280b4cacf386bfa8840afb312a4c520a03b27f805d181bd09ea208931a36e888060a2d") fsetxattr(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7573e9722e00"], &(0x7f0000000040)='user.syz\x00', 0x9, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x44045, 0xb) 2018/04/20 17:14:50 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x200, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="45029367deca6fcda9829bb95b8b235e7f861609157a3ac0b1ed77d195a4bcce2851530e3775465b6e478b0b2e8107cc24f33184926c67f1c90125522b45a0028baae94d38127dd8a16ace1d176db074d1293ed0af66615e987546b07e30dda9aa85d04371d52f6d56ae400eddae26bf34c88efbd1eef0ee348e91a0981f1d50ecc8e7f4b4d149e906b146a7fb072c834ac8e3d7915eb1c66510d52788280be97d1c03365d783820b483dde8b23dd7f1f91bda493614707bd1bb25307ea9d7581f19f0592f6b70949f415a4739110ad219bdb8192fa9e446bd19323c49f4489e7a", 0xe1}], 0x1) mmap(&(0x7f0000000000/0x18000)=nil, 0x18000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000000005401, &(0x7f0000003ff8)) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000180)=""/236) 2018/04/20 17:14:50 executing program 0: r0 = socket(0x2000000000a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@empty, @mcast1={0xff, 0x1, [], 0x1}, @loopback={0x40000000, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803ffdfe, r1}) 2018/04/20 17:14:50 executing program 1: r0 = socket$inet(0x2, 0x1000000006, 0x8) setsockopt$inet_int(r0, 0x0, 0xd0, &(0x7f0000000000), 0x4) 2018/04/20 17:14:50 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1, 0x7, 0x8, 0x1000000000000008}, 0x2c) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x8, 0x2000) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000000b000)={r0, &(0x7f0000014000)='A', &(0x7f0000012000)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000000b000)={r0, &(0x7f0000012000), &(0x7f000000cff6)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f000000a000)={r0, &(0x7f0000008000), &(0x7f0000016f02)=""/254}, 0x18) socket$inet6_sctp(0xa, 0x1, 0x84) 2018/04/20 17:14:50 executing program 7: mknod(&(0x7f0000000380)='./file0\x00', 0x918, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x8) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)=[&(0x7f0000000100)='ppp0.ppp0-}\x00', &(0x7f0000000140)='\x00', &(0x7f0000000180)='wlan1bdev\x00', &(0x7f00000001c0)='!em0\x00'], &(0x7f0000000140)) open(&(0x7f0000000040)='./file0\x00', 0x400000, 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) exit_group(0x7d) 2018/04/20 17:14:50 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0xffffffffffffffff) r1 = accept(0xffffffffffffffff, &(0x7f0000000100)=@in={0x0, 0x0, @local}, &(0x7f0000000180)=0xffffffffffffff34) r2 = dup(r1) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000000)={0x2, 0x0, [0x0, 0x0]}) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000540)=0x25d, 0x4) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000040)={{}, 0x1}) 2018/04/20 17:14:50 executing program 6: unshare(0x40000000) connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) r0 = socket(0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={"6970365f7674693000000200"}) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000240), 0x10) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x3, 0x4000) clock_nanosleep(0x5, 0x1, &(0x7f00000000c0), 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000001c0)={&(0x7f0000000180)=[0x4, 0x800, 0x4], 0x3, 0xb0, 0x3f, 0x7, 0x800, 0xb2be, {0x5, 0x3, 0x2, 0x4, 0x7, 0x223, 0x3ff, 0x90, 0xffffffff, 0x6, 0x3f, 0x7fffffff, 0x20, 0x5, "31cd112748a5f49646abb979e1cc55ca4b90664cdb2937a263fc53e8431131ee"}}) ioctl$VT_WAITACTIVE(r1, 0x5607) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000140)=[0x4, 0x6]) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000000)={{0x8, @remote={0xac, 0x14, 0x14, 0xbb}, 0x4e23, 0x0, 'lc\x00', 0x21, 0x4, 0x71}, {@rand_addr=0x5, 0x4e24, 0x2001, 0x0, 0x3, 0x1f}}, 0x44) 2018/04/20 17:14:50 executing program 3: shmget$private(0x0, 0x1000, 0x78000b17, &(0x7f0000a29000/0x1000)=nil) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x2, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) [ 67.426876] ================================================================== [ 67.434301] BUG: KMSAN: uninit-value in load_misc_binary+0x690/0x1920 [ 67.440878] CPU: 1 PID: 5818 Comm: syz-executor7 Not tainted 4.16.0+ #84 [ 67.447713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 67.457061] Call Trace: [ 67.459651] dump_stack+0x185/0x1d0 [ 67.463280] ? load_misc_binary+0x690/0x1920 [ 67.467689] kmsan_report+0x142/0x240 [ 67.471493] __msan_warning_32+0x6c/0xb0 2018/04/20 17:14:50 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x101080, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={0x0, 0xfffffffffffffffe}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000280)=@sack_info={r2, 0xffff, 0x80}, &(0x7f0000000200)=0xc) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000270ff2)='net/fib_trie\x00') bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) accept4$alg(r3, 0x0, 0x0, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000d06000), 0x4) 2018/04/20 17:14:50 executing program 4: r0 = getpid() prctl$setptracer(0x59616d61, r0) mq_open(&(0x7f00002f6000)='proc^eth1^wlan1user\x00', 0x40, 0x0, &(0x7f00008b1fe0)={0x0, 0x4, 0xffff}) [ 67.475551] load_misc_binary+0x690/0x1920 [ 67.479793] ? compat_SyS_ioctl+0x66e0/0x66e0 [ 67.484290] search_binary_handler+0x2ef/0xac0 [ 67.488876] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 67.494243] do_execveat_common+0x1f4d/0x2ce0 [ 67.498757] SYSC_execve+0xe2/0x110 [ 67.502396] SyS_execve+0x56/0x80 [ 67.505851] do_syscall_64+0x309/0x430 [ 67.509747] ? set_binfmt+0x1b0/0x1b0 [ 67.513556] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 67.518742] RIP: 0033:0x455379 [ 67.521953] RSP: 002b:00007f378c7a7c68 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 67.529659] RAX: ffffffffffffffda RBX: 00007f378c7a86d4 RCX: 0000000000455379 [ 67.536928] RDX: 0000000020000140 RSI: 0000000020000200 RDI: 00000000200000c0 [ 67.544194] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 67.551461] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 67.558736] R13: 0000000000000077 R14: 00000000006f3bc8 R15: 0000000000000000 [ 67.566014] [ 67.567642] Uninit was stored to memory at: [ 67.571971] kmsan_internal_chain_origin+0x12b/0x210 [ 67.577083] kmsan_memcpy_origins+0x11d/0x170 [ 67.581583] __msan_memcpy+0x19f/0x1f0 [ 67.585475] _copy_to_iter+0xea2/0x28f0 [ 67.589452] copy_page_to_iter+0x383/0x1b70 [ 67.593779] shmem_file_read_iter+0x99f/0x1180 [ 67.598368] __vfs_read+0x6fb/0x8e0 [ 67.602000] vfs_read+0x36c/0x6c0 [ 67.605462] kernel_read+0x11f/0x1a0 [ 67.609182] prepare_binprm+0x982/0xad0 [ 67.613159] do_execveat_common+0x1b35/0x2ce0 [ 67.617654] SYSC_execve+0xe2/0x110 [ 67.621282] SyS_execve+0x56/0x80 2018/04/20 17:14:50 executing program 0: r0 = socket(0x2000000000a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@empty, @mcast1={0xff, 0x1, [], 0x1}, @loopback={0x40000000, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803ffdfe, r1}) [ 67.624739] do_syscall_64+0x309/0x430 [ 67.628632] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 67.633811] Uninit was created at: [ 67.637354] kmsan_alloc_meta_for_pages+0x161/0x3a0 [ 67.642371] kmsan_alloc_page+0x82/0xe0 [ 67.646351] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 67.651110] alloc_pages_vma+0xcc8/0x1800 [ 67.655260] shmem_alloc_and_acct_page+0x6d5/0x1000 [ 67.660283] shmem_getpage_gfp+0x35db/0x5770 [ 67.664702] shmem_file_read_iter+0x508/0x1180 [ 67.669292] __vfs_read+0x6fb/0x8e0 [ 67.672929] vfs_read+0x36c/0x6c0 [ 67.676386] kernel_read+0x11f/0x1a0 [ 67.680104] prepare_binprm+0x982/0xad0 [ 67.684086] do_execveat_common+0x1b35/0x2ce0 [ 67.688585] SYSC_execve+0xe2/0x110 [ 67.692214] SyS_execve+0x56/0x80 [ 67.695669] do_syscall_64+0x309/0x430 [ 67.699558] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 67.704736] ================================================================== [ 67.713125] Disabling lock debugging due to kernel taint [ 67.718573] Kernel panic - not syncing: panic_on_warn set ... [ 67.718573] [ 67.725946] CPU: 1 PID: 5818 Comm: syz-executor7 Tainted: G B 4.16.0+ #84 [ 67.734084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 67.743434] Call Trace: [ 67.746028] dump_stack+0x185/0x1d0 [ 67.749664] panic+0x39d/0x940 [ 67.752874] ? load_misc_binary+0x690/0x1920 [ 67.757284] kmsan_report+0x238/0x240 [ 67.761097] __msan_warning_32+0x6c/0xb0 [ 67.765163] load_misc_binary+0x690/0x1920 [ 67.769411] ? compat_SyS_ioctl+0x66e0/0x66e0 [ 67.773911] search_binary_handler+0x2ef/0xac0 [ 67.778502] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 67.783872] do_execveat_common+0x1f4d/0x2ce0 [ 67.788389] SYSC_execve+0xe2/0x110 [ 67.792035] SyS_execve+0x56/0x80 [ 67.795506] do_syscall_64+0x309/0x430 [ 67.799401] ? set_binfmt+0x1b0/0x1b0 [ 67.803210] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 67.808399] RIP: 0033:0x455379 [ 67.811588] RSP: 002b:00007f378c7a7c68 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 67.819298] RAX: ffffffffffffffda RBX: 00007f378c7a86d4 RCX: 0000000000455379 [ 67.826565] RDX: 0000000020000140 RSI: 0000000020000200 RDI: 00000000200000c0 [ 67.833831] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 67.841097] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 67.848364] R13: 0000000000000077 R14: 00000000006f3bc8 R15: 0000000000000000 [ 67.856150] Dumping ftrace buffer: [ 67.859681] (ftrace buffer empty) [ 67.863370] Kernel Offset: disabled [ 67.866976] Rebooting in 86400 seconds..