INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.7' (ECDSA) to the list of known hosts. 2018/04/16 10:55:18 fuzzer started 2018/04/16 10:55:18 dialing manager at 10.128.0.26:41213 2018/04/16 10:55:25 kcov=true, comps=false 2018/04/16 10:55:28 executing program 0: 2018/04/16 10:55:28 executing program 2: 2018/04/16 10:55:28 executing program 7: 2018/04/16 10:55:28 executing program 1: 2018/04/16 10:55:28 executing program 3: 2018/04/16 10:55:28 executing program 4: 2018/04/16 10:55:28 executing program 5: 2018/04/16 10:55:28 executing program 6: syzkaller login: [ 43.445204] ip (3724) used greatest stack depth: 54688 bytes left [ 43.867192] ip (3765) used greatest stack depth: 54672 bytes left [ 44.635150] ip (3842) used greatest stack depth: 54200 bytes left [ 45.292685] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.299205] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.333888] device bridge_slave_0 entered promiscuous mode [ 45.377158] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.383660] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.411385] device bridge_slave_0 entered promiscuous mode [ 45.433198] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.439695] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.456878] device bridge_slave_0 entered promiscuous mode [ 45.483520] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.490115] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.519465] device bridge_slave_0 entered promiscuous mode [ 45.541959] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.548502] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.561442] device bridge_slave_0 entered promiscuous mode [ 45.580971] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.587488] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.617973] device bridge_slave_1 entered promiscuous mode [ 45.624826] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.631306] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.647152] device bridge_slave_0 entered promiscuous mode [ 45.658414] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.664967] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.695367] device bridge_slave_0 entered promiscuous mode [ 45.726405] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.733120] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.743544] device bridge_slave_1 entered promiscuous mode [ 45.757015] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.772216] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.778752] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.813162] device bridge_slave_1 entered promiscuous mode [ 45.820521] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.826983] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.841708] device bridge_slave_1 entered promiscuous mode [ 45.857691] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.864209] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.879965] device bridge_slave_1 entered promiscuous mode [ 45.887226] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.893776] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.909687] device bridge_slave_1 entered promiscuous mode [ 45.916392] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.922847] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.939695] device bridge_slave_0 entered promiscuous mode [ 45.956999] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.963537] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.985462] device bridge_slave_1 entered promiscuous mode [ 45.994751] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.004280] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.014899] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.022565] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.031139] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.063699] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.095318] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.101816] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.162116] device bridge_slave_1 entered promiscuous mode [ 46.201645] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.214949] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.224739] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.241093] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.269714] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.325182] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.369391] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.425143] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.614132] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.735012] ip (3987) used greatest stack depth: 53656 bytes left [ 47.027584] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.192679] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.227539] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.240484] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.254700] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.281225] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.384155] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.408584] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.416933] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.462605] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.472500] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.483764] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.612203] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.624164] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.685932] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.949359] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.250837] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.439679] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.459456] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.477384] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.500799] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.511476] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.590217] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.676162] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.685455] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.699968] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.707906] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.723507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.757842] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.768166] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.775866] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.810338] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.835462] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.847248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.871934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.934429] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.941656] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.953789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.975912] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.988714] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.996780] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.003986] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.016600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.053256] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.064664] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.071948] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.087447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.120737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.151552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.178594] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.186472] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.193990] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.202357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.210890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.225859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.263471] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.271452] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.278958] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.287864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.323273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.342964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.368933] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.376870] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.384125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.392403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.400533] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.408744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.432840] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.442526] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.461266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.492287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.602187] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.609402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.617825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.716935] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.724186] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.739408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.939624] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.946821] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.964547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.355598] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.362117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.369001] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.375614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.397983] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.405463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.607566] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.614141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.621022] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.627524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.645221] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.669997] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.676484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.683300] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.689744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.727095] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.734912] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.741396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.748379] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.754833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.792537] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.809358] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.815826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.822658] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.829148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.877534] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.903269] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.909778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.916650] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.923148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.978446] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.178391] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.184902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.191805] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.198295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.237767] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.435605] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.442135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.448983] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.455453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.468177] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.478208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.486628] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.505233] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.513971] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.524872] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.541455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.548834] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.848565] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.235198] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.303171] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.385116] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.449366] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.580874] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.632263] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.638582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.648929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.688017] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.710719] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.050736] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.057155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.069086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.143334] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.149665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.167727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.215214] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.221576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.242767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.301156] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.307457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.326863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.360877] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.367197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.395476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.557140] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.563464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.575083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.615658] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.622094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.637354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/16 10:55:54 executing program 7: 2018/04/16 10:55:54 executing program 7: perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip6_flowlabel\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) dup2(r0, r2) 2018/04/16 10:55:54 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r0, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) 2018/04/16 10:55:55 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000000)='!selinuxselinux\x00', 0x0) mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0c84f2, 0x0, &(0x7f0000664fc0)) 2018/04/16 10:55:55 executing program 7: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) 2018/04/16 10:55:55 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r0, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) 2018/04/16 10:55:55 executing program 3: syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/04/16 10:55:55 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x3}, 0x1c) sendmsg(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000ff0)=[{&(0x7f0000013ffe)="0600", 0x2}], 0x1, &(0x7f0000026000)}, 0x2000c080) write(r0, &(0x7f0000000180)="27ea", 0x2) [ 68.522163] ================================================================== [ 68.529585] BUG: KMSAN: uninit-value in rawv6_sendmsg+0x4bee/0x4cc0 [ 68.535998] CPU: 1 PID: 5737 Comm: syz-executor5 Not tainted 4.16.0+ #84 [ 68.542838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 68.552190] Call Trace: [ 68.554792] dump_stack+0x185/0x1d0 [ 68.558430] ? rawv6_sendmsg+0x4bee/0x4cc0 [ 68.562671] kmsan_report+0x142/0x240 [ 68.566483] __msan_warning_32+0x6c/0xb0 [ 68.570554] rawv6_sendmsg+0x4bee/0x4cc0 [ 68.574627] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 68.580087] ? futex_wait_queue_me+0x687/0x710 [ 68.584703] ? compat_rawv6_ioctl+0x30/0x30 [ 68.589037] inet_sendmsg+0x48d/0x740 [ 68.592846] ? security_socket_sendmsg+0x9e/0x210 [ 68.597697] ? inet_getname+0x500/0x500 [ 68.601676] sock_write_iter+0x3b9/0x470 [ 68.605741] ? sock_read_iter+0x480/0x480 [ 68.609889] __vfs_write+0x719/0x910 [ 68.613611] vfs_write+0x463/0x8d0 [ 68.617161] SYSC_write+0x172/0x360 [ 68.620797] SyS_write+0x55/0x80 [ 68.624162] do_syscall_64+0x309/0x430 [ 68.628060] ? SYSC_read+0x360/0x360 [ 68.631783] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 68.636972] RIP: 0033:0x455319 [ 68.640158] RSP: 002b:00007f20c31ffc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 68.647890] RAX: ffffffffffffffda RBX: 00007f20c32006d4 RCX: 0000000000455319 [ 68.655162] RDX: 0000000000000002 RSI: 0000000020000180 RDI: 0000000000000013 [ 68.662432] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 68.669706] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 68.676979] R13: 00000000000006b6 R14: 00000000006fd1b0 R15: 0000000000000000 [ 68.684254] [ 68.685876] Uninit was stored to memory at: [ 68.690296] kmsan_internal_chain_origin+0x12b/0x210 [ 68.695409] kmsan_memcpy_origins+0x11d/0x170 [ 68.699918] __msan_memcpy+0x19f/0x1f0 [ 68.703810] skb_copy_bits+0x63a/0xdb0 [ 68.707705] rawv6_sendmsg+0x427e/0x4cc0 [ 68.711772] inet_sendmsg+0x48d/0x740 [ 68.715658] sock_write_iter+0x3b9/0x470 [ 68.719716] __vfs_write+0x719/0x910 [ 68.723409] vfs_write+0x463/0x8d0 [ 68.726925] SYSC_write+0x172/0x360 [ 68.730579] SyS_write+0x55/0x80 [ 68.733926] do_syscall_64+0x309/0x430 [ 68.737795] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 68.742956] Uninit was created at: [ 68.746476] kmsan_alloc_meta_for_pages+0x161/0x3a0 [ 68.751485] kmsan_alloc_page+0x82/0xe0 [ 68.755438] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 68.760170] alloc_pages_current+0x6b5/0x970 [ 68.764554] skb_page_frag_refill+0x3ba/0x5e0 [ 68.769031] sk_page_frag_refill+0xa4/0x340 [ 68.773337] __ip6_append_data+0x1a20/0x4bb0 [ 68.777729] ip6_append_data+0x40e/0x6b0 [ 68.781766] rawv6_sendmsg+0x2787/0x4cc0 [ 68.785806] inet_sendmsg+0x48d/0x740 [ 68.789585] sock_write_iter+0x3b9/0x470 [ 68.793637] __vfs_write+0x719/0x910 [ 68.797327] vfs_write+0x463/0x8d0 [ 68.800845] SYSC_write+0x172/0x360 [ 68.804446] SyS_write+0x55/0x80 [ 68.807786] do_syscall_64+0x309/0x430 [ 68.811653] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 68.816814] ================================================================== [ 68.824144] Disabling lock debugging due to kernel taint [ 68.829570] Kernel panic - not syncing: panic_on_warn set ... [ 68.829570] [ 68.836912] CPU: 1 PID: 5737 Comm: syz-executor5 Tainted: G B 4.16.0+ #84 [ 68.845033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 68.854376] Call Trace: [ 68.856949] dump_stack+0x185/0x1d0 [ 68.860557] panic+0x39d/0x940 [ 68.863736] ? rawv6_sendmsg+0x4bee/0x4cc0 [ 68.867950] kmsan_report+0x238/0x240 [ 68.871730] __msan_warning_32+0x6c/0xb0 [ 68.875768] rawv6_sendmsg+0x4bee/0x4cc0 [ 68.879810] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 68.885239] ? futex_wait_queue_me+0x687/0x710 [ 68.889808] ? compat_rawv6_ioctl+0x30/0x30 [ 68.894110] inet_sendmsg+0x48d/0x740 [ 68.897893] ? security_socket_sendmsg+0x9e/0x210 [ 68.902720] ? inet_getname+0x500/0x500 [ 68.906677] sock_write_iter+0x3b9/0x470 [ 68.910719] ? sock_read_iter+0x480/0x480 [ 68.914848] __vfs_write+0x719/0x910 [ 68.918544] vfs_write+0x463/0x8d0 [ 68.922065] SYSC_write+0x172/0x360 [ 68.925675] SyS_write+0x55/0x80 [ 68.929029] do_syscall_64+0x309/0x430 [ 68.932900] ? SYSC_read+0x360/0x360 [ 68.936595] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 68.941761] RIP: 0033:0x455319 [ 68.944928] RSP: 002b:00007f20c31ffc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 68.952614] RAX: ffffffffffffffda RBX: 00007f20c32006d4 RCX: 0000000000455319 [ 68.959862] RDX: 0000000000000002 RSI: 0000000020000180 RDI: 0000000000000013 [ 68.967117] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 68.974373] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 68.981623] R13: 00000000000006b6 R14: 00000000006fd1b0 R15: 0000000000000000 [ 68.989368] Dumping ftrace buffer: [ 68.992888] (ftrace buffer empty) [ 68.996573] Kernel Offset: disabled [ 69.000177] Rebooting in 86400 seconds..