INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.31' (ECDSA) to the list of known hosts. 2018/04/18 09:14:50 fuzzer started 2018/04/18 09:14:50 dialing manager at 10.128.0.26:43187 2018/04/18 09:14:56 kcov=true, comps=false 2018/04/18 09:14:59 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000800)={&(0x7f0000000380)=@sco, 0x3cf, &(0x7f0000000700), 0x0, &(0x7f0000000740)=""/148, 0x94}, 0x0) recvmsg(r0, &(0x7f0000000440)={&(0x7f0000000300)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003f00)=""/4096, 0x1000}, {&(0x7f0000004f00)=""/4096, 0x1000}], 0x2, &(0x7f0000000400)=""/29, 0x1d}, 0x0) recvmsg(r0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000240)=""/183, 0xb7}, 0x0) recvmsg(r0, &(0x7f0000002ec0)={&(0x7f0000000080)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000001ec0)=""/4096, 0x1000}, 0x0) 2018/04/18 09:14:59 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="81081800001d000000010054409d0954", 0x10) r1 = accept(r0, 0x0, &(0x7f00000000c0)) sendto$inet(r1, &(0x7f0000000540), 0x0, 0x0, &(0x7f0000000100)={0x2, 0x0, @rand_addr}, 0x10) 2018/04/18 09:14:59 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000002280)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=ANY=[], 0x0) 2018/04/18 09:14:59 executing program 1: perf_event_open(&(0x7f0000000040)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'vhan0\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000880)={'bridge0\x00', 0x200}) 2018/04/18 09:14:59 executing program 4: 2018/04/18 09:14:59 executing program 3: 2018/04/18 09:14:59 executing program 5: 2018/04/18 09:14:59 executing program 6: syzkaller login: [ 44.468577] ip (3798) used greatest stack depth: 54672 bytes left [ 44.582170] ip (3810) used greatest stack depth: 54312 bytes left [ 45.468006] ip (3896) used greatest stack depth: 54296 bytes left [ 45.504334] ip (3897) used greatest stack depth: 54200 bytes left [ 45.700952] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.707472] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.735963] device bridge_slave_0 entered promiscuous mode [ 45.856657] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.863169] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.870765] ip (3925) used greatest stack depth: 53656 bytes left [ 45.916218] device bridge_slave_0 entered promiscuous mode [ 45.976355] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.982867] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.006833] device bridge_slave_0 entered promiscuous mode [ 46.016800] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.023272] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.045231] device bridge_slave_0 entered promiscuous mode [ 46.062256] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.068735] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.088123] device bridge_slave_1 entered promiscuous mode [ 46.100486] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.106957] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.123667] device bridge_slave_0 entered promiscuous mode [ 46.145267] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.151754] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.169354] device bridge_slave_0 entered promiscuous mode [ 46.193154] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.199683] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.215565] device bridge_slave_1 entered promiscuous mode [ 46.222680] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.229210] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.255155] device bridge_slave_0 entered promiscuous mode [ 46.281442] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.287981] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.297088] device bridge_slave_0 entered promiscuous mode [ 46.313916] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.326222] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.333908] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.340412] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.365675] device bridge_slave_1 entered promiscuous mode [ 46.372100] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.378668] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.403250] device bridge_slave_1 entered promiscuous mode [ 46.424229] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.430738] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.459318] device bridge_slave_1 entered promiscuous mode [ 46.477437] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.487505] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.497315] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.508425] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.514917] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.547311] device bridge_slave_1 entered promiscuous mode [ 46.553989] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.560499] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.584911] device bridge_slave_1 entered promiscuous mode [ 46.597358] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.603866] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.633499] device bridge_slave_1 entered promiscuous mode [ 46.645998] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.656786] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.666942] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.679677] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.704652] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.816733] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.857773] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.924356] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.932943] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.033867] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.099910] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.477410] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.607310] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.672078] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.700852] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.719965] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.843612] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.856310] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.874096] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.907810] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.962281] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.022922] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.068179] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.083997] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.192867] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.330166] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.351576] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.685532] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.782593] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.824788] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.909103] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.990856] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.009897] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.051743] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.114505] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.123747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.139920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.187644] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.204177] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.211614] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.219296] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.227632] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.239360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.287134] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.294380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.305891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.345975] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.353308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.394789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.432562] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.441639] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.448915] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.456317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.468784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.496667] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.505298] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.519613] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.526808] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.538778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.584602] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.592730] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.611137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.646658] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.656338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.673330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.698555] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.720696] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.729458] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.737826] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.745150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.768125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.808168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.837375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.894694] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.902344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.924611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.950384] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.957837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.984657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.028994] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.036566] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.051771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.095383] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.102685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.130881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.157802] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.183166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.212765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.310871] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.318206] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.336294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.937579] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.944149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.951130] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.957622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.991418] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.998111] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.018239] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.024703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.031518] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.037959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.047686] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.073647] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.080173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.087073] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.093546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.179995] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.247962] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.254490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.261431] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.267918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.315611] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.525905] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.532408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.539281] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.545752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.553574] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.572472] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.578984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.585874] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.592326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.665935] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.675812] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.682320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.689250] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.695727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.730852] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.024231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.042177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.084472] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.106701] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.115970] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.124885] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.133632] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.140114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.146945] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.153387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.161208] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.048407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.437793] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.614605] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.737413] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.937655] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.007272] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.205198] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.217239] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.223495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.232255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.264563] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.415295] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.421583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.433677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.488501] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.494828] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.520170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.629822] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.636221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.647711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.765496] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.919013] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.925402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.939992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.046017] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.052445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.064125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.210505] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.216962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.229859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.560685] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.577076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.593116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.126607] netlink: 'syz-executor0': attribute type 29 has an invalid length. [ 68.134515] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. [ 68.221288] netlink: 'syz-executor0': attribute type 29 has an invalid length. [ 68.228862] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. [ 68.338773] netlink: 'syz-executor0': attribute type 29 has an invalid length. [ 68.346365] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. 2018/04/18 09:15:26 executing program 5: 2018/04/18 09:15:26 executing program 7: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) ioctl$KDGKBLED(r0, 0x4004510d, &(0x7f0000000080)) [ 68.418188] netlink: 'syz-executor0': attribute type 29 has an invalid length. [ 68.425706] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. [ 68.492375] netlink: 'syz-executor0': attribute type 29 has an invalid length. [ 68.499932] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. [ 68.584256] netlink: 'syz-executor0': attribute type 29 has an invalid length. [ 68.591877] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. 2018/04/18 09:15:26 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @rand_addr}, @icmp=@parameter_prob={0x21, 0x0, 0x0, 0x0, 0x0, 0xffffff80, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @rand_addr}}}}}}, &(0x7f0000000040)) 2018/04/18 09:15:26 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./file1\x00', 0x0) write$evdev(r1, &(0x7f0000000040), 0x0) [ 68.682024] netlink: 'syz-executor0': attribute type 29 has an invalid length. [ 68.689674] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. 2018/04/18 09:15:26 executing program 1: perf_event_open(&(0x7f0000000040)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'vhan0\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000880)={'bridge0\x00', 0x200}) [ 68.794601] netlink: 'syz-executor0': attribute type 29 has an invalid length. [ 68.802186] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. 2018/04/18 09:15:26 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000000c0)=ANY=[], 0x0) 2018/04/18 09:15:26 executing program 7: r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@in6={0xa, 0x4e24, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000000)}, 0x0) [ 69.124317] ================================================================== [ 69.131771] BUG: KMSAN: uninit-value in vmac_setkey+0x337/0x940 [ 69.137848] CPU: 0 PID: 5754 Comm: syz-executor2 Not tainted 4.16.0+ #84 [ 69.144699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.154064] Call Trace: [ 69.156682] dump_stack+0x185/0x1d0 [ 69.160328] ? vmac_setkey+0x337/0x940 [ 69.164227] kmsan_report+0x142/0x240 [ 69.168039] ? aes_set_key+0x260/0x260 [ 69.171941] __msan_warning_32+0x6c/0xb0 [ 69.176008] ? aes_set_key+0x260/0x260 [ 69.179904] vmac_setkey+0x337/0x940 [ 69.183633] ? vmac_final+0x3f80/0x3f80 [ 69.187613] shash_async_setkey+0x337/0x4c0 [ 69.191942] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 69.197309] ? trace_kmalloc+0xb6/0x2b0 [ 69.201290] ? shash_async_digest+0x1b0/0x1b0 [ 69.205795] crypto_ahash_setkey+0x31a/0x470 [ 69.210208] hash_setkey+0x8b/0xa0 [ 69.213788] alg_setsockopt+0x6c5/0x740 [ 69.217787] ? hash_release+0x50/0x50 [ 69.221628] ? alg_accept+0xd0/0xd0 [ 69.225279] SYSC_setsockopt+0x4b8/0x570 [ 69.229372] SyS_setsockopt+0x76/0xa0 [ 69.233192] do_syscall_64+0x309/0x430 [ 69.237096] ? SYSC_recv+0xe0/0xe0 [ 69.240640] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 69.245812] RIP: 0033:0x455329 [ 69.248982] RSP: 002b:00007f1869f8bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 69.256695] RAX: ffffffffffffffda RBX: 00007f1869f8c6d4 RCX: 0000000000455329 [ 69.264992] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000013 [ 69.272262] RBP: 000000000072bea0 R08: 0000000000000010 R09: 0000000000000000 [ 69.279535] R10: 0000000020000080 R11: 0000000000000246 R12: 00000000ffffffff [ 69.286796] R13: 0000000000000510 R14: 00000000006faa20 R15: 0000000000000000 [ 69.294059] [ 69.295677] Local variable description: ----out.i@vmac_setkey [ 69.301535] Variable was created at: [ 69.305238] vmac_setkey+0x93/0x940 [ 69.308846] shash_async_setkey+0x337/0x4c0 [ 69.313148] ================================================================== [ 69.320503] Disabling lock debugging due to kernel taint [ 69.325940] Kernel panic - not syncing: panic_on_warn set ... [ 69.325940] [ 69.333291] CPU: 0 PID: 5754 Comm: syz-executor2 Tainted: G B 4.16.0+ #84 [ 69.341949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.351290] Call Trace: [ 69.353873] dump_stack+0x185/0x1d0 [ 69.357488] panic+0x39d/0x940 [ 69.360675] ? vmac_setkey+0x337/0x940 [ 69.364547] kmsan_report+0x238/0x240 [ 69.368348] ? aes_set_key+0x260/0x260 [ 69.372232] __msan_warning_32+0x6c/0xb0 [ 69.376285] ? aes_set_key+0x260/0x260 [ 69.380160] vmac_setkey+0x337/0x940 [ 69.383874] ? vmac_final+0x3f80/0x3f80 [ 69.387833] shash_async_setkey+0x337/0x4c0 [ 69.392140] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 69.397502] ? trace_kmalloc+0xb6/0x2b0 [ 69.401480] ? shash_async_digest+0x1b0/0x1b0 [ 69.405964] crypto_ahash_setkey+0x31a/0x470 [ 69.410362] hash_setkey+0x8b/0xa0 [ 69.413889] alg_setsockopt+0x6c5/0x740 [ 69.417850] ? hash_release+0x50/0x50 [ 69.421639] ? alg_accept+0xd0/0xd0 [ 69.425263] SYSC_setsockopt+0x4b8/0x570 [ 69.429326] SyS_setsockopt+0x76/0xa0 [ 69.433116] do_syscall_64+0x309/0x430 [ 69.437005] ? SYSC_recv+0xe0/0xe0 [ 69.440543] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 69.445713] RIP: 0033:0x455329 [ 69.448883] RSP: 002b:00007f1869f8bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 69.456574] RAX: ffffffffffffffda RBX: 00007f1869f8c6d4 RCX: 0000000000455329 [ 69.463840] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000013 [ 69.471094] RBP: 000000000072bea0 R08: 0000000000000010 R09: 0000000000000000 [ 69.478350] R10: 0000000020000080 R11: 0000000000000246 R12: 00000000ffffffff [ 69.485603] R13: 0000000000000510 R14: 00000000006faa20 R15: 0000000000000000 [ 69.493277] Dumping ftrace buffer: [ 69.496799] (ftrace buffer empty) [ 69.500484] Kernel Offset: disabled [ 69.504086] Rebooting in 86400 seconds..