INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.4' (ECDSA) to the list of known hosts. 2018/04/16 14:50:33 fuzzer started 2018/04/16 14:50:33 dialing manager at 10.128.0.26:41213 2018/04/16 14:50:41 kcov=true, comps=false 2018/04/16 14:50:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) syz_emit_ethernet(0x2a, &(0x7f000037c000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1=0xe0000001, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 2018/04/16 14:50:44 executing program 2: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x400000002}, 0x1c) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffbfffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f000000b180)=[{{0x0, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001500)}}, {{&(0x7f0000000400)=@in6={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}, 0x80, &(0x7f0000001280), 0x0, &(0x7f0000000040)=[{0x10, 0x0, 0x7}], 0x10}}], 0x2, 0x0) 2018/04/16 14:50:44 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000516ff0)={0x2, 0x4e21, @rand_addr}, 0x10) sendto$inet(r0, &(0x7f0000588fff), 0xfffffffffffffe98, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x1) r1 = socket(0x10, 0x3, 0x4) sendmsg$nl_xfrm(r1, &(0x7f00009d3000)={&(0x7f0000c15000)={0x10}, 0xc, &(0x7f00001e5ff0)={&(0x7f0000abdefc)=@delsa={0x4c, 0x12, 0x515485708c54ddb, 0x0, 0x0, {@in=@rand_addr}, [@sec_ctx={0x24, 0x8, {0x1d, 0x8, 0x0, 0x0, 0x15, "69cc8910cf7a5164ef891111a0edabf37c1fd93a0d"}}]}, 0x4c}, 0x1}, 0x0) 2018/04/16 14:50:44 executing program 1: r0 = socket$inet(0x10, 0x2000000000003, 0x0) sendmsg(r0, &(0x7f00000b5000)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000006000)="240000001900030008fffd946fa283bd0af0ffffff0000060500000000000000d114737e", 0x24}], 0x1}, 0x0) 2018/04/16 14:50:44 executing program 3: r0 = shmget(0x0, 0x3000, 0x640, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_RMID(r0, 0x0) 2018/04/16 14:50:44 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="d179f2508fb13583605d0008a230e7a657f9cc6e", 0x14) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000036c0)=[{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000640)="3e59fe04bae75cfd14f526e0acc3c48c", 0x10}], 0x1}], 0x1, 0x0) recvmsg(r1, &(0x7f00000001c0)={&(0x7f0000000140)=@nfc_llcp, 0x80, &(0x7f0000000200)=[{&(0x7f0000000300)=""/88, 0x1e}], 0x1, &(0x7f00009f2000)=""/190, 0xbe}, 0x0) 2018/04/16 14:50:44 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 2018/04/16 14:50:44 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, 0x1c) syzkaller login: [ 45.869565] ip (3648) used greatest stack depth: 54688 bytes left [ 46.420703] ip (3695) used greatest stack depth: 54672 bytes left [ 47.155538] ip (3768) used greatest stack depth: 54200 bytes left [ 47.693381] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.699932] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.739526] device bridge_slave_0 entered promiscuous mode [ 47.775179] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.781697] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.796206] device bridge_slave_0 entered promiscuous mode [ 47.942307] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.948834] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.002617] device bridge_slave_1 entered promiscuous mode [ 48.022350] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.028873] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.039483] device bridge_slave_0 entered promiscuous mode [ 48.049109] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.055574] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.070715] device bridge_slave_0 entered promiscuous mode [ 48.091359] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.097869] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.114817] device bridge_slave_1 entered promiscuous mode [ 48.134661] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.141188] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.155325] device bridge_slave_0 entered promiscuous mode [ 48.193980] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.200521] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.224821] device bridge_slave_0 entered promiscuous mode [ 48.243570] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 48.257384] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.263922] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.290007] device bridge_slave_0 entered promiscuous mode [ 48.298282] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.304772] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.314625] device bridge_slave_1 entered promiscuous mode [ 48.321348] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.327837] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.350485] device bridge_slave_1 entered promiscuous mode [ 48.369174] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.375675] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.397763] device bridge_slave_0 entered promiscuous mode [ 48.420139] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.426638] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.443281] device bridge_slave_1 entered promiscuous mode [ 48.454765] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.462474] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 48.472267] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.478803] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.521643] device bridge_slave_1 entered promiscuous mode [ 48.531667] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 48.542451] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.549346] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.587014] device bridge_slave_1 entered promiscuous mode [ 48.596455] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 48.607333] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.626622] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 48.633783] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.640273] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.664098] device bridge_slave_1 entered promiscuous mode [ 48.705565] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.729288] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 48.803747] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.814930] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 48.881898] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 48.890131] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.928787] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 49.040310] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 49.123880] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 49.526160] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 49.672756] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 49.736222] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.754624] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 49.803919] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 49.858670] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 49.943471] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.954109] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 50.004463] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 50.027473] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 50.039659] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 50.065596] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 50.165441] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 50.211235] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 50.293148] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 50.370221] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 50.745793] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.945756] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.968474] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 51.048554] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 51.057835] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 51.067450] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 51.159492] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.166821] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.181757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.210925] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 51.231563] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 51.255608] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 51.263294] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 51.307401] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 51.391449] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.398668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.412789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.442839] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.454457] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 51.461416] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.475269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.492754] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.504282] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.513963] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 51.522622] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.531237] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 51.538355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.562776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.603191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.638222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.669184] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.691655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.705510] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.714315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.723404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.736949] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.765703] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 51.775227] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.782447] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.791709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.818685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.846941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.876836] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.890452] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 51.897825] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.911282] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.918418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.950504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.979400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.008611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.017767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.025927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.043067] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.078022] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.090153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.110868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.152124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.185896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.279551] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.286800] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.303286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.335421] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.350213] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.384115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.078671] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.085212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.092187] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.098686] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.143999] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.150676] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.193726] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.200219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.207111] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.213594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.266965] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.279300] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.285789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.292626] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.299132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.318190] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.326507] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.332995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.339874] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.346352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.356648] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.363803] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.370269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.377158] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.383630] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.399964] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.429707] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.436228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.443170] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.449636] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.468686] ip (4293) used greatest stack depth: 53976 bytes left [ 54.542973] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.781508] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.788092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.794970] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.801478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.840357] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.858720] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.865250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.872185] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.878685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.945953] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 55.200211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.215733] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.255769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.288257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.322707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.341771] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.349764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.913999] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 63.931262] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 63.969195] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 64.055466] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 64.066693] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 64.087710] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 64.101332] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 64.552324] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 64.707766] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 64.714145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.725710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.760824] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 64.768667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.779889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.816484] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 64.827665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.862902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.902405] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 64.908824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.941934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.964296] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 64.975342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.986728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.026589] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 65.045143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.061264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.089333] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 65.101667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.118851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.412002] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 65.418387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.427698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/16 14:51:11 executing program 6: 2018/04/16 14:51:11 executing program 6: 2018/04/16 14:51:11 executing program 6: 2018/04/16 14:51:11 executing program 6: 2018/04/16 14:51:12 executing program 6: 2018/04/16 14:51:12 executing program 6: [ 71.189961] ================================================================== [ 71.197394] BUG: KMSAN: uninit-value in gcmaes_decrypt+0x2ec/0xea0 [ 71.203749] CPU: 1 PID: 5630 Comm: syz-executor4 Not tainted 4.16.0+ #84 [ 71.210805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 71.220236] Call Trace: [ 71.222831] dump_stack+0x185/0x1d0 [ 71.226464] ? gcmaes_decrypt+0x2ec/0xea0 [ 71.230608] kmsan_report+0x142/0x240 [ 71.234402] __msan_warning_32+0x6c/0xb0 [ 71.238458] gcmaes_decrypt+0x2ec/0xea0 [ 71.242433] generic_gcmaes_decrypt+0x181/0x1e0 [ 71.247106] ? generic_gcmaes_encrypt+0x1e0/0x1e0 [ 71.251945] gcmaes_wrapper_decrypt+0x2f5/0x340 [ 71.256611] ? gcmaes_wrapper_encrypt+0x2d0/0x2d0 [ 71.261453] crypto_rfc4543_crypt+0xaec/0xb40 [ 71.265945] ? crypto_has_alg+0x280/0x280 [ 71.270095] crypto_rfc4543_decrypt+0x47/0x50 [ 71.274680] ? crypto_rfc4543_encrypt+0x60/0x60 [ 71.279343] aead_recvmsg+0x25b5/0x2960 [ 71.283327] sock_recvmsg+0x1d0/0x230 [ 71.287387] ? aead_sendmsg+0x1b0/0x1b0 [ 71.291360] ___sys_recvmsg+0x3fb/0x810 [ 71.295337] ? __fget_light+0x56/0x710 [ 71.299220] ? __fdget+0x4e/0x60 [ 71.302593] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 71.307956] ? __fget_light+0x6b9/0x710 [ 71.311948] SYSC_recvmsg+0x298/0x3c0 [ 71.315756] SyS_recvmsg+0x54/0x80 [ 71.319297] do_syscall_64+0x309/0x430 [ 71.323186] ? ___sys_recvmsg+0x810/0x810 [ 71.327344] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 71.332527] RIP: 0033:0x455319 [ 71.335706] RSP: 002b:00007f6e1082dc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 71.343426] RAX: ffffffffffffffda RBX: 00007f6e1082e6d4 RCX: 0000000000455319 [ 71.350692] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000014 [ 71.357955] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 71.365230] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 71.372493] R13: 0000000000000496 R14: 00000000006f9eb0 R15: 0000000000000000 [ 71.379757] [ 71.381369] Uninit was created at: [ 71.384912] kmsan_internal_poison_shadow+0xb8/0x1b0 [ 71.390007] kmsan_kmalloc+0x94/0x100 [ 71.393797] __kmalloc+0x23c/0x350 [ 71.397331] sock_kmalloc+0x14e/0x270 [ 71.401123] af_alg_alloc_areq+0x85/0x320 [ 71.405268] aead_recvmsg+0x65a/0x2960 [ 71.409151] sock_recvmsg+0x1d0/0x230 [ 71.412951] ___sys_recvmsg+0x3fb/0x810 [ 71.416929] SYSC_recvmsg+0x298/0x3c0 [ 71.420730] SyS_recvmsg+0x54/0x80 [ 71.424265] do_syscall_64+0x309/0x430 [ 71.428146] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 71.433330] ================================================================== [ 71.440674] Disabling lock debugging due to kernel taint [ 71.446198] Kernel panic - not syncing: panic_on_warn set ... [ 71.446198] [ 71.453561] CPU: 1 PID: 5630 Comm: syz-executor4 Tainted: G B 4.16.0+ #84 [ 71.461685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 71.471047] Call Trace: [ 71.473639] dump_stack+0x185/0x1d0 [ 71.477262] panic+0x39d/0x940 [ 71.480467] ? gcmaes_decrypt+0x2ec/0xea0 [ 71.484627] kmsan_report+0x238/0x240 [ 71.488426] __msan_warning_32+0x6c/0xb0 [ 71.492482] gcmaes_decrypt+0x2ec/0xea0 [ 71.496471] generic_gcmaes_decrypt+0x181/0x1e0 [ 71.501138] ? generic_gcmaes_encrypt+0x1e0/0x1e0 [ 71.506149] gcmaes_wrapper_decrypt+0x2f5/0x340 [ 71.510815] ? gcmaes_wrapper_encrypt+0x2d0/0x2d0 [ 71.515650] crypto_rfc4543_crypt+0xaec/0xb40 [ 71.520138] ? crypto_has_alg+0x280/0x280 [ 71.524281] crypto_rfc4543_decrypt+0x47/0x50 [ 71.528766] ? crypto_rfc4543_encrypt+0x60/0x60 [ 71.533426] aead_recvmsg+0x25b5/0x2960 [ 71.537409] sock_recvmsg+0x1d0/0x230 [ 71.541202] ? aead_sendmsg+0x1b0/0x1b0 [ 71.545170] ___sys_recvmsg+0x3fb/0x810 [ 71.549146] ? __fget_light+0x56/0x710 [ 71.553032] ? __fdget+0x4e/0x60 [ 71.556393] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 71.561745] ? __fget_light+0x6b9/0x710 [ 71.565719] SYSC_recvmsg+0x298/0x3c0 [ 71.569519] SyS_recvmsg+0x54/0x80 [ 71.573055] do_syscall_64+0x309/0x430 [ 71.576939] ? ___sys_recvmsg+0x810/0x810 [ 71.581085] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 71.586263] RIP: 0033:0x455319 [ 71.589440] RSP: 002b:00007f6e1082dc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 71.597145] RAX: ffffffffffffffda RBX: 00007f6e1082e6d4 RCX: 0000000000455319 [ 71.604412] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000014 [ 71.611670] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 71.618927] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 71.626188] R13: 0000000000000496 R14: 00000000006f9eb0 R15: 0000000000000000 [ 72.753274] Shutting down cpus with NMI [ 72.768995] Dumping ftrace buffer: [ 72.772533] (ftrace buffer empty) [ 72.776232] Kernel Offset: disabled [ 72.779848] Rebooting in 86400 seconds..