INIT: Entering runlevel: 2
[[36minfo[39;49m] Using makefile-style concurrent boot in runlevel 2.
[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
[....] Starting periodic command scheduler: cron[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
Debian GNU/Linux 7 syzkaller ttyS0
Warning: Permanently added '10.128.0.15' (ECDSA) to the list of known hosts.
net.ipv6.conf.syz_tun.accept_dad = 0
net.ipv6.conf.syz_tun.router_solicitations = 0
RTNETLINK answers: Operation not supported
RTNETLINK answers: Operation not supported
RTNETLINK answers: Operation not supported
RTNETLINK answers: Operation not supported
syzkaller login: [ 37.155446] ip (3630) used greatest stack depth: 54560 bytes left
[ 37.181792] ip (3632) used greatest stack depth: 53640 bytes left
[ 37.226210] bridge0: port 1(bridge_slave_0) entered blocking state
[ 37.232826] bridge0: port 1(bridge_slave_0) entered disabled state
[ 37.240786] device bridge_slave_0 entered promiscuous mode
[ 37.268670] bridge0: port 2(bridge_slave_1) entered blocking state
[ 37.275277] bridge0: port 2(bridge_slave_1) entered disabled state
[ 37.283708] device bridge_slave_1 entered promiscuous mode
[ 37.310901] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[ 37.339237] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
Error: argument "bond0" is wrong: Device does not exist
Error: argument "bond0" is wrong: Device does not exist
[ 37.488030] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[ 37.516449] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
Error: argument "team0" is wrong: Device does not exist
Error: argument "team0" is wrong: Device does not exist
[ 37.659604] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[ 37.685896] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[ 37.713929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 37.744920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
RTNETLINK answers: Operation not supported
Cannot find device "vcan0"
[ 37.999218] bridge0: port 2(bridge_slave_1) entered blocking state
[ 38.005832] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 38.012900] bridge0: port 1(bridge_slave_0) entered blocking state
[ 38.019482] bridge0: port 1(bridge_slave_0) entered forwarding state
Cannot find device "vcan0"
Cannot find device "vcan0"
Cannot find device "vcan0"
Cannot find device "tunl0"
Cannot find device "tunl0"
Cannot find device "tunl0"
Cannot find device "tunl0"
Cannot find device "gre0"
Cannot find device "gre0"
Cannot find device "gre0"
Cannot find device "gre0"
Cannot find device "gretap0"
Cannot find device "gretap0"
Cannot find device "gretap0"
Cannot find device "gretap0"
Cannot find device "ip_vti0"
Cannot find device "ip_vti0"
Cannot find device "ip_vti0"
Cannot find device "ip_vti0"
Cannot find device "ip6_vti0"
Cannot find device "ip6_vti0"
Cannot find device "ip6_vti0"
Cannot find device "ip6_vti0"
Cannot find device "ip6tnl0"
Cannot find device "ip6tnl0"
Cannot find device "ip6tnl0"
Cannot find device "ip6tnl0"
Cannot find device "ip6gre0"
Cannot find device "ip6gre0"
Cannot find device "ip6gre0"
Cannot find device "ip6gre0"
Cannot find device "ip6gretap0"
Cannot find device "ip6gretap0"
Cannot find device "ip6gretap0"
Cannot find device "ip6gretap0"
Cannot find device "erspan0"
Cannot find device "erspan0"
Cannot find device "erspan0"
Cannot find device "erspan0"
Cannot find device "bond0"
Cannot find device "bond0"
Cannot find device "bond0"
Cannot find device "bond0"
[ 39.791599] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
Cannot find device "team0"
[ 39.876169] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[ 39.882539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 39.890814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
Cannot find device "team0"
Cannot find device "team0"
Cannot find device "team0"
executing program
[ 40.510024] ==================================================================
[ 40.517634] BUG: KMSAN: uninit-value in ipv6_destopt_rcv+0x3df/0xde0
[ 40.524124] CPU: 0 PID: 3597 Comm: syzkaller660167 Not tainted 4.16.0+ #83
[ 40.531130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 40.540486] Call Trace:
[ 40.543063]
[ 40.545212] dump_stack+0x185/0x1d0
[ 40.548836] ? ipv6_destopt_rcv+0x3df/0xde0
[ 40.553158] kmsan_report+0x142/0x240
[ 40.556949] __msan_warning_32+0x6c/0xb0
[ 40.561005] ipv6_destopt_rcv+0x3df/0xde0
[ 40.565164] ? ipv6_rthdr_rcv+0x3ea0/0x3ea0
[ 40.569484] ip6_input_finish+0xa62/0x2110
[ 40.573754] ip6_mc_input+0x697/0x740
[ 40.577564] ? kmsan_set_origin+0x9e/0x160
[ 40.581806] ? ip6_input_finish+0x2110/0x2110
[ 40.586321] ipv6_rcv+0x20ec/0x26d0
[ 40.589940] ? run_posix_cpu_timers+0xba/0x4930
[ 40.594617] ? update_process_times+0x168/0x1a0
[ 40.599332] __netif_receive_skb_core+0x47cf/0x4a80
[ 40.604367] ? rb_insert_color+0xa4/0x1300
[ 40.608600] ? kmsan_internal_memset_shadow_inline+0xd0/0xd0
[ 40.614402] ? ip6_rcv_finish+0x4d0/0x4d0
[ 40.618550] process_backlog+0x62d/0xe20
[ 40.622623] ? rps_trigger_softirq+0x2f0/0x2f0
[ 40.627201] net_rx_action+0x7c1/0x1a70
[ 40.631224] ? net_tx_action+0xab0/0xab0
[ 40.635304] __do_softirq+0x56d/0x93d
[ 40.639111] do_softirq_own_stack+0x2a/0x40
[ 40.643422]
[ 40.645660] do_softirq+0xb6/0xf0
[ 40.649121] dev_loopback_xmit+0x8b0/0x900
[ 40.653375] ip6_finish_output2+0x5e6/0x1f20
[ 40.657792] ? __msan_metadata_ptr_for_store_4+0x13/0x20
[ 40.663257] ip6_finish_output+0xb3f/0xc00
[ 40.667493] ip6_output+0x597/0x6c0
[ 40.671132] ? __msan_poison_alloca+0x15c/0x1d0
[ 40.675818] ? ac6_seq_show+0x200/0x200
[ 40.679793] ip6_local_out+0x573/0x640
[ 40.683688] ip6_push_pending_frames+0x218/0x4d0
[ 40.688461] rawv6_sendmsg+0x4500/0x4cc0
[ 40.692530] ? kmsan_internal_unpoison_shadow+0x83/0xe0
[ 40.697916] ? rw_copy_check_uvector+0x5af/0x6c0
[ 40.702704] ? compat_rawv6_ioctl+0x30/0x30
[ 40.707137] inet_sendmsg+0x48d/0x740
[ 40.710945] ? security_socket_sendmsg+0x9e/0x210
[ 40.715804] ? inet_getname+0x500/0x500
[ 40.719789] ___sys_sendmsg+0xec0/0x1310
[ 40.723855] ? __fdget+0x4e/0x60
[ 40.727214] ? __fget_light+0x56/0x710
[ 40.731092] ? __fdget+0x4e/0x60
[ 40.734622] ? __fget_light+0x1dc/0x710
[ 40.738595] ? __msan_metadata_ptr_for_load_4+0x10/0x20
[ 40.743965] ? __fget_light+0x1f5/0x710
[ 40.747977] SYSC_sendmsg+0x2a3/0x3d0
[ 40.751790] SyS_sendmsg+0x54/0x80
[ 40.755346] do_syscall_64+0x309/0x430
[ 40.759243] ? ___sys_sendmsg+0x1310/0x1310
[ 40.763586] entry_SYSCALL_64_after_hwframe+0x3d/0xa2
[ 40.768794] RIP: 0033:0x441ae9
[ 40.771975] RSP: 002b:00007ffeff1cbd28 EFLAGS: 00000217 ORIG_RAX: 000000000000002e
[ 40.779854] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 0000000000441ae9
[ 40.787117] RDX: 0000000000000000 RSI: 0000000020000a40 RDI: 0000000000000003
[ 40.794479] RBP: 0030656c69662f2e R08: 0000000000000000 R09: 0000000000000000
[ 40.801749] R10: 0000000000000000 R11: 0000000000000217 R12: 0000000000000004
[ 40.809055] R13: 0000000000402870 R14: 0000000000000000 R15: 0000000000000000
[ 40.816355]
[ 40.817971] Uninit was stored to memory at:
[ 40.822315] kmsan_internal_chain_origin+0x12b/0x210
[ 40.827410] kmsan_memcpy_origins+0x11d/0x170
[ 40.831923] __msan_memcpy+0x19f/0x1f0
[ 40.835803] skb_copy_bits+0x63a/0xdb0
[ 40.839677] __pskb_pull_tail+0x483/0x22e0
[ 40.843917] ipv6_destopt_rcv+0x660/0xde0
[ 40.848083] ip6_input_finish+0xa62/0x2110
[ 40.852310] ip6_mc_input+0x697/0x740
[ 40.856123] ipv6_rcv+0x20ec/0x26d0
[ 40.859747] __netif_receive_skb_core+0x47cf/0x4a80
[ 40.864888] process_backlog+0x62d/0xe20
[ 40.868952] net_rx_action+0x7c1/0x1a70
[ 40.872929] __do_softirq+0x56d/0x93d
[ 40.876727] Uninit was created at:
[ 40.880292] kmsan_alloc_meta_for_pages+0x161/0x3a0
[ 40.885336] kmsan_alloc_page+0x82/0xe0
[ 40.889311] __alloc_pages_nodemask+0xf5b/0x5dc0
[ 40.894072] alloc_pages_current+0x6b5/0x970
[ 40.898477] skb_page_frag_refill+0x3ba/0x5e0
[ 40.902977] sk_page_frag_refill+0xa4/0x340
[ 40.907314] __ip6_append_data+0x1a20/0x4bb0
[ 40.911727] ip6_append_data+0x40e/0x6b0
[ 40.915794] rawv6_sendmsg+0x2787/0x4cc0
[ 40.919871] inet_sendmsg+0x48d/0x740
[ 40.923685] ___sys_sendmsg+0xec0/0x1310
[ 40.927754] SYSC_sendmsg+0x2a3/0x3d0
[ 40.931552] SyS_sendmsg+0x54/0x80
[ 40.935097] do_syscall_64+0x309/0x430
[ 40.938990] entry_SYSCALL_64_after_hwframe+0x3d/0xa2
[ 40.944172] ==================================================================
[ 40.951543] Disabling lock debugging due to kernel taint
[ 40.957079] Kernel panic - not syncing: panic_on_warn set ...
[ 40.957079]
[ 40.964625] CPU: 0 PID: 3597 Comm: syzkaller660167 Tainted: G B 4.16.0+ #83
[ 40.972944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 40.982316] Call Trace:
[ 40.984890]
[ 40.987067] dump_stack+0x185/0x1d0
[ 40.990717] panic+0x39d/0x940
[ 40.993922] ? ipv6_destopt_rcv+0x3df/0xde0
[ 40.998244] kmsan_report+0x238/0x240
[ 41.002085] __msan_warning_32+0x6c/0xb0
[ 41.006174] ipv6_destopt_rcv+0x3df/0xde0
[ 41.010344] ? ipv6_rthdr_rcv+0x3ea0/0x3ea0
[ 41.014703] ip6_input_finish+0xa62/0x2110
[ 41.018970] ip6_mc_input+0x697/0x740
[ 41.022788] ? kmsan_set_origin+0x9e/0x160
[ 41.027049] ? ip6_input_finish+0x2110/0x2110
[ 41.031570] ipv6_rcv+0x20ec/0x26d0
[ 41.035238] ? run_posix_cpu_timers+0xba/0x4930
[ 41.039967] ? update_process_times+0x168/0x1a0
[ 41.044668] __netif_receive_skb_core+0x47cf/0x4a80
[ 41.049776] ? rb_insert_color+0xa4/0x1300
[ 41.054038] ? kmsan_internal_memset_shadow_inline+0xd0/0xd0
[ 41.059958] ? ip6_rcv_finish+0x4d0/0x4d0
[ 41.064119] process_backlog+0x62d/0xe20
[ 41.068199] ? rps_trigger_softirq+0x2f0/0x2f0
[ 41.072833] net_rx_action+0x7c1/0x1a70
[ 41.076847] ? net_tx_action+0xab0/0xab0
[ 41.080910] __do_softirq+0x56d/0x93d
[ 41.084707] do_softirq_own_stack+0x2a/0x40
[ 41.089044]
[ 41.091294] do_softirq+0xb6/0xf0
[ 41.094754] dev_loopback_xmit+0x8b0/0x900
[ 41.100094] ip6_finish_output2+0x5e6/0x1f20
[ 41.104527] ? __msan_metadata_ptr_for_store_4+0x13/0x20
[ 41.109988] ip6_finish_output+0xb3f/0xc00
[ 41.114235] ip6_output+0x597/0x6c0
[ 41.117877] ? __msan_poison_alloca+0x15c/0x1d0
[ 41.122547] ? ac6_seq_show+0x200/0x200
[ 41.126533] ip6_local_out+0x573/0x640
[ 41.130462] ip6_push_pending_frames+0x218/0x4d0
[ 41.135221] rawv6_sendmsg+0x4500/0x4cc0
[ 41.139305] ? kmsan_internal_unpoison_shadow+0x83/0xe0
[ 41.144813] ? rw_copy_check_uvector+0x5af/0x6c0
[ 41.149588] ? compat_rawv6_ioctl+0x30/0x30
[ 41.153921] inet_sendmsg+0x48d/0x740
[ 41.157743] ? security_socket_sendmsg+0x9e/0x210
[ 41.162613] ? inet_getname+0x500/0x500
[ 41.166612] ___sys_sendmsg+0xec0/0x1310
[ 41.170697] ? __fdget+0x4e/0x60
[ 41.174079] ? __fget_light+0x56/0x710
[ 41.177973] ? __fdget+0x4e/0x60
[ 41.181362] ? __fget_light+0x1dc/0x710
[ 41.185343] ? __msan_metadata_ptr_for_load_4+0x10/0x20
[ 41.190732] ? __fget_light+0x1f5/0x710
[ 41.195499] SYSC_sendmsg+0x2a3/0x3d0
[ 41.199301] SyS_sendmsg+0x54/0x80
[ 41.202858] do_syscall_64+0x309/0x430
[ 41.206846] ? ___sys_sendmsg+0x1310/0x1310
[ 41.211179] entry_SYSCALL_64_after_hwframe+0x3d/0xa2
[ 41.216368] RIP: 0033:0x441ae9
[ 41.219562] RSP: 002b:00007ffeff1cbd28 EFLAGS: 00000217 ORIG_RAX: 000000000000002e
[ 41.227278] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 0000000000441ae9
[ 41.234555] RDX: 0000000000000000 RSI: 0000000020000a40 RDI: 0000000000000003
[ 41.241824] RBP: 0030656c69662f2e R08: 0000000000000000 R09: 0000000000000000
[ 41.249115] R10: 0000000000000000 R11: 0000000000000217 R12: 0000000000000004
[ 41.256390] R13: 0000000000402870 R14: 0000000000000000 R15: 0000000000000000
[ 41.264305] Dumping ftrace buffer:
[ 41.267852] (ftrace buffer empty)
[ 41.271551] Kernel Offset: disabled
[ 41.275180] Rebooting in 86400 seconds..