INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.37' (ECDSA) to the list of known hosts. 2018/04/20 18:39:43 fuzzer started 2018/04/20 18:39:43 dialing manager at 10.128.0.26:40315 2018/04/20 18:39:49 kcov=true, comps=false 2018/04/20 18:39:52 executing program 0: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400100401000200027400f8", 0x16}], 0x0, &(0x7f0000000140)={[{@discard='discard', 0x2c}]}) 2018/04/20 18:39:52 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$KDMKTONE(r0, 0x5382, 0x0) 2018/04/20 18:39:52 executing program 7: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x8, r1) 2018/04/20 18:39:52 executing program 3: capset(&(0x7f00000002c0)={0x19980330}, &(0x7f0000244000)) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000003fc8)={&(0x7f0000004000)=@nl=@proc={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f0000001000)="5500000018007fafb72d1cb2a4a280930206000000a843096c2623692500080003000149bd50ca8a9848a3c728f1c46b7b31afdc1338d54400009b84136ef75afb83de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f0000004000)}, 0x0) 2018/04/20 18:39:52 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000065b000)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cdf944e36380ba6f5f48c46037000100", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)="d189ab15ff91da292b9efe76e3373953db597e4eca9ef4ab0a865da5fc77e70596986cf926a26c7060eee1a78fe6ffc8aa7ab3298927685a2910473ddae3f0c2a74d50bec3df3f8b78892aa98c7bfe124b1924cf25e6396cb66b2a07c32f84f93f4826bacf73cec427006856afc6814c929a6a31d545d3bbed4bf07f9cc3c2e2", 0x80}], 0x1, &(0x7f0000000480)}, 0x0) 2018/04/20 18:39:52 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00002e9000)='task\x00') getdents(r0, &(0x7f0000eee000)=""/36, 0x24) 2018/04/20 18:39:52 executing program 6: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r0, &(0x7f0000000000)={0x1f}, 0xa) mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) 2018/04/20 18:39:52 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000fa6000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000db5000)={0x3, 0x0, 0x0, 0x3}) syzkaller login: [ 41.964194] ip (3754) used greatest stack depth: 54672 bytes left [ 42.511760] ip (3805) used greatest stack depth: 54312 bytes left [ 43.399460] ip (3894) used greatest stack depth: 54200 bytes left [ 43.716447] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.722934] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.780965] device bridge_slave_0 entered promiscuous mode [ 43.821661] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.828186] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.856303] device bridge_slave_0 entered promiscuous mode [ 43.902849] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.909377] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.950959] device bridge_slave_0 entered promiscuous mode [ 43.981208] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.987711] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.000842] device bridge_slave_0 entered promiscuous mode [ 44.012240] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.018702] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.044597] device bridge_slave_1 entered promiscuous mode [ 44.072012] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.078540] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.088943] device bridge_slave_0 entered promiscuous mode [ 44.105381] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.111876] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.121507] device bridge_slave_1 entered promiscuous mode [ 44.130638] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.137110] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.151265] device bridge_slave_0 entered promiscuous mode [ 44.159666] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.166178] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.176136] device bridge_slave_0 entered promiscuous mode [ 44.188179] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.194624] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.216379] device bridge_slave_0 entered promiscuous mode [ 44.240831] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.247328] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.257511] device bridge_slave_1 entered promiscuous mode [ 44.266585] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.273116] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.291496] device bridge_slave_1 entered promiscuous mode [ 44.297965] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.305526] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.312101] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.330772] device bridge_slave_1 entered promiscuous mode [ 44.341523] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.352891] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.359425] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.388999] device bridge_slave_1 entered promiscuous mode [ 44.409637] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.416141] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.452786] device bridge_slave_1 entered promiscuous mode [ 44.460119] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.472326] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.479795] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.488771] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.495244] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.529551] device bridge_slave_1 entered promiscuous mode [ 44.538325] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.547865] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.557447] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.576076] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.645554] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.701333] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.750601] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.769743] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.778381] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.878909] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.971236] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.451719] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.524502] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.561186] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.677454] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.684714] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.730198] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.776018] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.796162] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.809935] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.828015] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.860551] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.007159] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.015910] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.031901] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.105797] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.264329] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.614749] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.712796] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.750981] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.831332] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 46.918103] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.943076] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 46.967348] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.032746] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.047507] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.054740] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.066797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.095065] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.103223] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.133148] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.177876] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.185527] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.204405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.233551] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.240849] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.255560] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.263687] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.284686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.318609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.346392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.364534] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.375075] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.385776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.397587] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.408412] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.417688] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.436292] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.443669] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.464581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.499099] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.508168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.526142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.562900] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.587988] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.595832] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.609005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.644932] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.653078] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.660204] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.671673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.696259] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.717251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.758570] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.766161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.786746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.825293] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.833565] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.872076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.898453] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.910419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.925824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.942840] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.953282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.974859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.006985] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.017208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.034725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.071297] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.080106] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.092682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.799500] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.806005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.812991] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.819451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.842545] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 49.851244] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.857692] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.864548] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.871012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.879285] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 49.887661] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.903075] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.932009] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.938539] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.945360] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.951813] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.034925] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.043525] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.049991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.056850] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.063320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.094571] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.302660] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.309177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.316079] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.322546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.339836] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.352913] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.359400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.366289] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.372754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.403998] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.418778] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.425253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.432144] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.438958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.511350] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.630057] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.636545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.643360] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.649807] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.704517] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.912348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.919971] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.941677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.951749] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.960804] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.969152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.065143] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.126122] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.335418] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.348511] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.517413] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.662831] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.755584] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 59.877487] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 59.883763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.896837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.924777] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 59.940860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.965674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.006564] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.113933] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.120202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.128104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.194091] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.200372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.211938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.423915] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.430252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.443572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.485326] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.491563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.501853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.542969] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.560171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.599639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.862847] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.869214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.879566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/20 18:40:18 executing program 7: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000029000)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f000002c000)="240000000806ff031d000004400000000a200a050c000100061d85680c1ba3e20400ff7e", 0x24}], 0x1}, 0x0) 2018/04/20 18:40:18 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000875ff5)='net/ptype\x00') preadv(r0, &(0x7f00003d6000)=[{&(0x7f0000065f12)=""/238, 0xee}], 0x1, 0x0) 2018/04/20 18:40:18 executing program 2: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000facfff)="06", 0x1, r1) r3 = add_key$user(&(0x7f0000fc0ffb)='user\x00', &(0x7f0000752ffb)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00003eb000)="b3", 0x1, r1) keyctl$update(0x2, r3, &(0x7f0000000680)="df02754677212dfc3e2abcb24473e8e1cfef09742258cbae7b26fdc3ffa615d9da494137e175e9f2780ac5e2a09f43a1fcebf272a5a135de92bf4a9033933824f6e6aa0238014e3293535d1c0066d28e0f275188b4b4c187e18774fc2227cbb6610fc6697f533772b4977275458d828550ce549d6164c8fbe1181e6d50986cd98a5c44ac0ec375deb27eafcf7d06438f2525100400000003e7dc2f8fd85adcd88ca30e75b1e143262d94defa187e482a9b9aa1387353df7a21affce4e9149e04", 0xc0) keyctl$dh_compute(0x17, &(0x7f0000000300)={r2, r3, r2}, &(0x7f0000000200)=""/5, 0x5, &(0x7f0000000180)={&(0x7f00000000c0)={'poly1305\x00'}}) 2018/04/20 18:40:18 executing program 7: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="26000000130047f10701c1b00e000000000000000100000009ef18ffff00f132050014006e35", 0x26) 2018/04/20 18:40:19 executing program 4: r0 = socket$inet6(0x10, 0x100000003, 0x0) sendmsg(r0, &(0x7f0000003fc8)={&(0x7f0000000000)=@nl=@proc={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f0000001000)="5500000018007fafb72d1cb2a4a280930206000000a843096c26236925000b0000040149bd50ca8a9848a3c728f1c46b7b31afdc1338d54400009b84136ef75afb83de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f0000004000)}, 0x0) [ 65.967449] capability: warning: `syz-executor3' uses 32-bit capabilities (legacy support in use) [ 66.095328] netlink: 'syz-executor4': attribute type 11 has an invalid length. 2018/04/20 18:40:19 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004747410c0eaa820b8000007aa7c40a00afc74f8c3488"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6006118"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f00000004c0)="73797a6b584e3e2f9afed6d0ee3d5d5de2f791e4545b69c564e359a02949ab535c1b25caa665b968d2f1a32e3febe4189befa5f044722bae83e5b6959e392e8d24e41b4ce153c97b5a23e135e38d3b1d14ad7a9eeb7069347fee053569544f1a0000000000000000", 0x80000001, 0x466, &(0x7f0000000300)=""/187}, 0x48) [ 66.242952] ================================================================== [ 66.250390] BUG: KMSAN: uninit-value in vmac_setkey+0x337/0x940 [ 66.256449] CPU: 0 PID: 5744 Comm: syz-executor5 Not tainted 4.16.0+ #84 [ 66.263291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 66.272642] Call Trace: [ 66.275242] dump_stack+0x185/0x1d0 [ 66.278882] ? vmac_setkey+0x337/0x940 [ 66.282771] kmsan_report+0x142/0x240 [ 66.286572] ? aes_set_key+0x260/0x260 [ 66.290470] __msan_warning_32+0x6c/0xb0 [ 66.294535] ? aes_set_key+0x260/0x260 [ 66.298428] vmac_setkey+0x337/0x940 [ 66.302152] ? vmac_final+0x3f80/0x3f80 [ 66.306129] shash_async_setkey+0x337/0x4c0 [ 66.310542] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 66.315908] ? trace_kmalloc+0xb6/0x2b0 [ 66.319888] ? shash_async_digest+0x1b0/0x1b0 [ 66.324388] crypto_ahash_setkey+0x31a/0x470 [ 66.328822] hash_setkey+0x8b/0xa0 [ 66.332372] alg_setsockopt+0x6c5/0x740 [ 66.336352] ? hash_release+0x50/0x50 [ 66.340153] ? alg_accept+0xd0/0xd0 [ 66.343778] SYSC_setsockopt+0x4b8/0x570 [ 66.347845] SyS_setsockopt+0x76/0xa0 [ 66.351644] do_syscall_64+0x309/0x430 [ 66.355537] ? SYSC_recv+0xe0/0xe0 [ 66.359089] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 66.364282] RIP: 0033:0x455379 [ 66.367467] RSP: 002b:00007f3dbd9d2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 66.375177] RAX: ffffffffffffffda RBX: 00007f3dbd9d36d4 RCX: 0000000000455379 [ 66.382444] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000013 [ 66.389733] RBP: 000000000072bea0 R08: 0000000000000010 R09: 0000000000000000 [ 66.397002] R10: 0000000020000000 R11: 0000000000000246 R12: 00000000ffffffff [ 66.404277] R13: 0000000000000519 R14: 00000000006faaf8 R15: 0000000000000000 [ 66.411544] [ 66.413167] Local variable description: ----out.i@vmac_setkey [ 66.419037] Variable was created at: [ 66.422756] vmac_setkey+0x93/0x940 [ 66.426381] shash_async_setkey+0x337/0x4c0 [ 66.430691] ================================================================== [ 66.438039] Disabling lock debugging due to kernel taint 2018/04/20 18:40:19 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = dup(r0) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000004000)=0x3000, 0xfffffffffffffe20) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000003ff0)={&(0x7f0000011000/0x3000)=nil, 0x6e8000}) 2018/04/20 18:40:19 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget(0x0, 0x1000, 0x300, &(0x7f0000ffe000/0x1000)=nil) [ 66.443488] Kernel panic - not syncing: panic_on_warn set ... [ 66.443488] [ 66.450856] CPU: 0 PID: 5744 Comm: syz-executor5 Tainted: G B 4.16.0+ #84 [ 66.458994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 66.468344] Call Trace: [ 66.470934] dump_stack+0x185/0x1d0 [ 66.474569] panic+0x39d/0x940 [ 66.477816] ? vmac_setkey+0x337/0x940 [ 66.481709] kmsan_report+0x238/0x240 [ 66.485513] ? aes_set_key+0x260/0x260 [ 66.489404] __msan_warning_32+0x6c/0xb0 [ 66.493468] ? aes_set_key+0x260/0x260 [ 66.497360] vmac_setkey+0x337/0x940 [ 66.501083] ? vmac_final+0x3f80/0x3f80 [ 66.505069] shash_async_setkey+0x337/0x4c0 [ 66.509395] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 66.514763] ? trace_kmalloc+0xb6/0x2b0 [ 66.518745] ? shash_async_digest+0x1b0/0x1b0 [ 66.523250] crypto_ahash_setkey+0x31a/0x470 [ 66.527669] hash_setkey+0x8b/0xa0 [ 66.531211] alg_setsockopt+0x6c5/0x740 [ 66.535189] ? hash_release+0x50/0x50 [ 66.538994] ? alg_accept+0xd0/0xd0 [ 66.542626] SYSC_setsockopt+0x4b8/0x570 [ 66.546696] SyS_setsockopt+0x76/0xa0 [ 66.550504] do_syscall_64+0x309/0x430 [ 66.554413] ? SYSC_recv+0xe0/0xe0 [ 66.557962] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 66.563149] RIP: 0033:0x455379 [ 66.566337] RSP: 002b:00007f3dbd9d2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 66.574491] RAX: ffffffffffffffda RBX: 00007f3dbd9d36d4 RCX: 0000000000455379 [ 66.581759] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000013 [ 66.589028] RBP: 000000000072bea0 R08: 0000000000000010 R09: 0000000000000000 [ 66.596327] R10: 0000000020000000 R11: 0000000000000246 R12: 00000000ffffffff [ 66.603593] R13: 0000000000000519 R14: 00000000006faaf8 R15: 0000000000000000 [ 66.611387] Dumping ftrace buffer: [ 66.614925] (ftrace buffer empty) [ 66.618610] Kernel Offset: disabled [ 66.622211] Rebooting in 86400 seconds..