INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.32' (ECDSA) to the list of known hosts. 2018/04/21 01:16:07 fuzzer started 2018/04/21 01:16:07 dialing manager at 10.128.0.26:35229 2018/04/21 01:16:14 kcov=true, comps=false 2018/04/21 01:16:17 executing program 0: 2018/04/21 01:16:17 executing program 1: 2018/04/21 01:16:17 executing program 7: 2018/04/21 01:16:17 executing program 4: perf_event_open(&(0x7f0000723f88)={0x2, 0x70, 0xc35, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"d202b999cf8500000000006309000010", 0x102}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000100)={0x0, 0x1, [@random="efacafed3872"]}) 2018/04/21 01:16:17 executing program 5: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f00000000c0)='./file0/file0\x00') 2018/04/21 01:16:17 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000780)='net/ip_mr_vif\x00') preadv(r0, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0x7f}], 0x1, 0x102) 2018/04/21 01:16:17 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69ad096aafd2e331dda0efc402e00efaa1b173afde4ba11707dad1c8ed93017b844b36ccc06d49d8f0ab57050ab61b378eba4e6a963c841ec67822445462a54d055ed7874bba489b70947a4cac66858e8f6938194594c7c055d23ad1b8a0c7360ee431d43549a") ioctl$fiemap(r0, 0x40286608, &(0x7f00000001c0)=ANY=[@ANYBLOB="8000000000d7e8cf00000000000000000000000000000000"]) 2018/04/21 01:16:17 executing program 6: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) r1 = socket$kcm(0xa, 0x3, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x14, &(0x7f0000000180), 0x127) setsockopt$sock_attach_bpf(r1, 0x29, 0x14, &(0x7f0000000380), 0x1a9) syzkaller login: [ 43.591313] ip (3778) used greatest stack depth: 54672 bytes left [ 44.048627] ip (3822) used greatest stack depth: 54312 bytes left [ 44.987521] ip (3915) used greatest stack depth: 54200 bytes left [ 45.354907] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.361478] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.409371] device bridge_slave_0 entered promiscuous mode [ 45.479309] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.485792] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.514123] device bridge_slave_0 entered promiscuous mode [ 45.532635] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.539161] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.561475] device bridge_slave_0 entered promiscuous mode [ 45.589101] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.595863] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.624868] device bridge_slave_0 entered promiscuous mode [ 45.639305] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.645796] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.664394] device bridge_slave_0 entered promiscuous mode [ 45.671701] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.678193] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.697007] device bridge_slave_1 entered promiscuous mode [ 45.707510] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.713992] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.733803] device bridge_slave_0 entered promiscuous mode [ 45.758768] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.765264] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.787202] device bridge_slave_0 entered promiscuous mode [ 45.797505] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.803971] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.819964] device bridge_slave_0 entered promiscuous mode [ 45.834079] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.840545] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.854433] device bridge_slave_1 entered promiscuous mode [ 45.861399] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.867840] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.892013] device bridge_slave_1 entered promiscuous mode [ 45.903736] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.910245] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.922177] device bridge_slave_1 entered promiscuous mode [ 45.931713] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.938171] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.948144] device bridge_slave_1 entered promiscuous mode [ 45.957893] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.965362] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.971823] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.984431] device bridge_slave_1 entered promiscuous mode [ 45.997850] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.006871] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.013351] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.058909] device bridge_slave_1 entered promiscuous mode [ 46.083483] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.089983] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.119099] device bridge_slave_1 entered promiscuous mode [ 46.128750] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.140904] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.148492] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.158997] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.171543] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.188873] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.260311] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.297410] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.357382] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.370631] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.428312] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.442985] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.488529] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.501995] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.726301] ip (4033) used greatest stack depth: 54120 bytes left [ 47.134127] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.154371] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.321561] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.351839] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.378199] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.385808] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.425536] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.504702] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.518885] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.553728] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.567498] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.617222] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.633973] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.747291] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.758442] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.772931] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.304874] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.401926] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.538566] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.571247] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.613966] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.657672] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.676385] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.704193] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.715439] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.743456] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.752476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.765859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.813491] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.820844] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.837123] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.844992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.874844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.911478] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.927766] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.941940] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.950399] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.016537] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.024378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.037700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.062699] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.073588] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.080651] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.116102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.151244] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.159910] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.168335] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.177851] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.185363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.213812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.247665] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.270822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.289861] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.306212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.321264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.329208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.338461] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.345746] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.354531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.367561] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.385739] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.393724] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.401948] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.409660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.419288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.449855] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.484823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.516392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.526309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.535191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.543164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.552069] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.562339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.572088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.625678] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.636106] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.643307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.680262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.725108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.756842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.655299] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.661784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.668677] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.675136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.722372] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.733505] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.739982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.746856] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.753295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.797018] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.805177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.825672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.836621] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.843116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.849998] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.856539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.864269] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.880757] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.887215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.894143] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.900582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.916095] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.935475] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.941948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.948907] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.955371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.017129] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.070099] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.076601] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.083496] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.089967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.129063] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.147621] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.154128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.161019] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.167509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.195583] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.205914] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.212396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.219323] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.225817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.284164] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.832167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.845709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.870715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.890706] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.909475] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.917156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.002601] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.227671] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.315224] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.395215] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.531724] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.539589] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.618778] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.678681] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.834510] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.840802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.860422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.014209] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.020564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.032123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.092562] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.101119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.120188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.288303] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.296146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.318706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.350911] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.362573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.400677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.441916] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.448411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.461106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.522736] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.528969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.543663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.586982] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.596866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.612725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/21 01:16:44 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(blowfish))\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab2719", 0x4) sendmsg$alg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000280), 0x2e4, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f0000158000)={&(0x7f0000000180)=@nfc_llcp, 0x253, &(0x7f0000000000)=[{&(0x7f000080f000)=""/4096, 0x1000}], 0x1, &(0x7f0000da2000)}, 0x0) 2018/04/21 01:16:44 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a00)='./cgroup.net\x00', 0x200002, 0x0) r1 = creat(&(0x7f0000000040)='./file1\x00', 0x0) r2 = dup3(r1, r0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x34123610) ftruncate(r1, 0x3) write$cgroup_subtree(r2, &(0x7f00000002c0), 0xa871f499) 2018/04/21 01:16:44 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001cc0)={&(0x7f0000000080)={0x10, 0x9effffff00000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000010000108eeff000000000000e04e0000", @ANYBLOB="000000000000000008001b0000000000"], 0x2}, 0x1}, 0x0) 2018/04/21 01:16:44 executing program 5: inotify_init1(0x896e93943f481231) 2018/04/21 01:16:44 executing program 1: 2018/04/21 01:16:44 executing program 6: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) r1 = socket$kcm(0xa, 0x3, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x14, &(0x7f0000000180), 0x127) setsockopt$sock_attach_bpf(r1, 0x29, 0x14, &(0x7f0000000380), 0x1a9) 2018/04/21 01:16:44 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./file1\x00', 0x0) pwritev(r1, &(0x7f0000000100)=[{&(0x7f0000000200)="10", 0x1}], 0x1, 0x0) r2 = dup3(r1, r0, 0x80000) fallocate(r2, 0x1, 0x0, 0x400003) pwritev(r1, &(0x7f00000012c0)=[{&(0x7f0000000140)='l', 0x1}], 0x1, 0x200000) 2018/04/21 01:16:44 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00009b6ff9)='ns/mnt\x00') ioctl$sock_netrom_TIOCINQ(r0, 0x541b, &(0x7f00000001c0)) 2018/04/21 01:16:44 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000000400), 0xc2, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r1 = dup2(r0, r0) recvmmsg(r1, &(0x7f0000004ac0)=[{{&(0x7f0000002240)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4={[], [], @rand_addr}}}}, 0x80, &(0x7f0000002500)=[{&(0x7f0000002400)=""/176, 0xb0}, {&(0x7f00000024c0)=""/29, 0x1d}], 0x2, &(0x7f0000002540)=""/228, 0xe4}}, {{0x0, 0x0, &(0x7f0000004980), 0x0, &(0x7f00000049c0)=""/224, 0xe0}}], 0x2, 0x10000, &(0x7f0000004b80)={0x77359400}) 2018/04/21 01:16:44 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000000400), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) clock_gettime(0x0, &(0x7f0000000500)) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='syz_tun\x00', 0x10) sendto$inet(r0, &(0x7f0000000040)='V', 0x1, 0x0, &(0x7f0000000140)={0x2, 0x0, @rand_addr}, 0x10) writev(r0, &(0x7f0000000500), 0x26b) 2018/04/21 01:16:44 executing program 6: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mount(&(0x7f0000000340)='./file0\x00', &(0x7f0000000740)='./file0//./..\x00', &(0x7f0000000780)='rootfs\x00', 0x2000, &(0x7f00000007c0)) 2018/04/21 01:16:44 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x3a) r1 = dup(r0) setsockopt$inet_mreq(r1, 0x0, 0x27, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x1b}, @dev={0xac, 0x14, 0x14, 0xf}}, 0xfe9a) connect$inet6(r0, &(0x7f0000002fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmsg(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000ff0)=[{&(0x7f0000013ffe)="0600", 0x2}], 0x1, &(0x7f0000026000)}, 0x2000c080) write(r0, &(0x7f0000000000)="d09f9f1712997900094b635b2cd93e1941eecd87554b0fcdcab1000000004d2e6029b2fd2b507993d2e1959bab0a10050000", 0x32) 2018/04/21 01:16:44 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000400), 0xc2, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) dup2(r0, r1) 2018/04/21 01:16:44 executing program 4: syz_open_procfs(0x0, &(0x7f0000000780)='maps\x00') [ 68.825678] ================================================================== [ 68.833095] BUG: KMSAN: uninit-value in rawv6_sendmsg+0x4bee/0x4cc0 [ 68.839513] CPU: 0 PID: 5826 Comm: syz-executor7 Not tainted 4.16.0+ #84 [ 68.846347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 68.855696] Call Trace: [ 68.858297] dump_stack+0x185/0x1d0 [ 68.861928] ? rawv6_sendmsg+0x4bee/0x4cc0 [ 68.866165] kmsan_report+0x142/0x240 [ 68.869977] __msan_warning_32+0x6c/0xb0 [ 68.874040] rawv6_sendmsg+0x4bee/0x4cc0 [ 68.878102] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 68.883561] ? futex_wait_queue_me+0x687/0x710 [ 68.888168] ? compat_rawv6_ioctl+0x30/0x30 [ 68.892490] inet_sendmsg+0x48d/0x740 [ 68.896292] ? security_socket_sendmsg+0x9e/0x210 [ 68.901141] ? inet_getname+0x500/0x500 [ 68.905125] sock_write_iter+0x3b9/0x470 [ 68.909198] ? sock_read_iter+0x480/0x480 [ 68.913350] __vfs_write+0x719/0x910 [ 68.917074] vfs_write+0x463/0x8d0 [ 68.920622] SYSC_write+0x172/0x360 [ 68.924256] SyS_write+0x55/0x80 [ 68.927631] do_syscall_64+0x309/0x430 [ 68.931521] ? SYSC_read+0x360/0x360 [ 68.935246] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 68.940436] RIP: 0033:0x455389 [ 68.943627] RSP: 002b:00007f2d75077c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 68.951343] RAX: ffffffffffffffda RBX: 00007f2d750786d4 RCX: 0000000000455389 [ 68.958610] RDX: 0000000000000032 RSI: 0000000020000000 RDI: 0000000000000013 [ 68.965878] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 68.973146] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 68.980410] R13: 00000000000006c1 R14: 00000000006fd2b8 R15: 0000000000000000 [ 68.987677] [ 68.989293] Uninit was stored to memory at: [ 68.993622] kmsan_internal_chain_origin+0x12b/0x210 [ 68.998727] kmsan_memcpy_origins+0x11d/0x170 [ 69.003224] __msan_memcpy+0x19f/0x1f0 [ 69.007119] skb_copy_bits+0x63a/0xdb0 [ 69.011004] rawv6_sendmsg+0x427e/0x4cc0 [ 69.015068] inet_sendmsg+0x48d/0x740 [ 69.018882] sock_write_iter+0x3b9/0x470 [ 69.022950] __vfs_write+0x719/0x910 [ 69.026669] vfs_write+0x463/0x8d0 [ 69.030212] SYSC_write+0x172/0x360 [ 69.035231] SyS_write+0x55/0x80 [ 69.038598] do_syscall_64+0x309/0x430 [ 69.042495] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 69.047673] Uninit was created at: [ 69.051217] kmsan_alloc_meta_for_pages+0x161/0x3a0 [ 69.056229] kmsan_alloc_page+0x82/0xe0 [ 69.060211] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 69.064965] alloc_pages_current+0x6b5/0x970 [ 69.069373] skb_page_frag_refill+0x3ba/0x5e0 2018/04/21 01:16:44 executing program 4: syz_open_procfs(0x0, &(0x7f0000000780)='maps\x00') 2018/04/21 01:16:44 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(blowfish))\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab2719", 0x4) sendmsg$alg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000280), 0x2e4, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f0000158000)={&(0x7f0000000180)=@nfc_llcp, 0x253, &(0x7f0000000000)=[{&(0x7f000080f000)=""/4096, 0x1000}], 0x1, &(0x7f0000da2000)}, 0x0) 2018/04/21 01:16:45 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000000400), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x0, 0x5, 0x0, "246c8c44fdea9f431b55c8781a5e12fc51d4fa89c641543be5ce1f91633eb82d7ebe3dd5f2d7e3272c8cdc875a88dd7a88c1bc3485e5bd033217c65c883b7066b764833bfb74df438fc32d61a6636860"}, 0xd8) clock_gettime(0x0, &(0x7f0000000500)) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='syz_tun\x00', 0x10) sendto$inet(r0, &(0x7f0000000040)='V', 0x1, 0x0, &(0x7f0000000140)={0x2, 0x0, @rand_addr}, 0x10) write$binfmt_misc(r0, &(0x7f0000000300)={'syz0'}, 0x4) writev(r0, &(0x7f0000000500), 0x26b) [ 69.073865] sk_page_frag_refill+0xa4/0x340 [ 69.078191] __ip6_append_data+0x1a20/0x4bb0 [ 69.082626] ip6_append_data+0x40e/0x6b0 [ 69.086685] rawv6_sendmsg+0x2787/0x4cc0 [ 69.090747] inet_sendmsg+0x48d/0x740 [ 69.094551] sock_write_iter+0x3b9/0x470 [ 69.098614] __vfs_write+0x719/0x910 [ 69.102330] vfs_write+0x463/0x8d0 [ 69.105872] SYSC_write+0x172/0x360 [ 69.109496] SyS_write+0x55/0x80 [ 69.112863] do_syscall_64+0x309/0x430 [ 69.116759] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 69.121937] ================================================================== [ 69.129287] Disabling lock debugging due to kernel taint [ 69.134733] Kernel panic - not syncing: panic_on_warn set ... [ 69.134733] [ 69.142117] CPU: 0 PID: 5826 Comm: syz-executor7 Tainted: G B 4.16.0+ #84 [ 69.150256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.159607] Call Trace: [ 69.162218] dump_stack+0x185/0x1d0 [ 69.165862] panic+0x39d/0x940 [ 69.169078] ? rawv6_sendmsg+0x4bee/0x4cc0 [ 69.173318] kmsan_report+0x238/0x240 [ 69.177132] __msan_warning_32+0x6c/0xb0 [ 69.181195] rawv6_sendmsg+0x4bee/0x4cc0 [ 69.185812] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 69.191272] ? futex_wait_queue_me+0x687/0x710 [ 69.195874] ? compat_rawv6_ioctl+0x30/0x30 [ 69.200200] inet_sendmsg+0x48d/0x740 [ 69.204002] ? security_socket_sendmsg+0x9e/0x210 [ 69.208852] ? inet_getname+0x500/0x500 [ 69.212835] sock_write_iter+0x3b9/0x470 [ 69.216908] ? sock_read_iter+0x480/0x480 [ 69.221059] __vfs_write+0x719/0x910 [ 69.224784] vfs_write+0x463/0x8d0 [ 69.228333] SYSC_write+0x172/0x360 [ 69.231963] SyS_write+0x55/0x80 [ 69.235334] do_syscall_64+0x309/0x430 [ 69.239227] ? SYSC_read+0x360/0x360 [ 69.242952] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 69.248145] RIP: 0033:0x455389 [ 69.251331] RSP: 002b:00007f2d75077c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 69.259052] RAX: ffffffffffffffda RBX: 00007f2d750786d4 RCX: 0000000000455389 [ 69.266321] RDX: 0000000000000032 RSI: 0000000020000000 RDI: 0000000000000013 [ 69.273596] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 69.280876] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 69.288148] R13: 00000000000006c1 R14: 00000000006fd2b8 R15: 0000000000000000 [ 69.295960] Dumping ftrace buffer: [ 69.299479] (ftrace buffer empty) [ 69.303165] Kernel Offset: disabled [ 69.306767] Rebooting in 86400 seconds..