INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.5' (ECDSA) to the list of known hosts. 2018/04/16 23:06:50 fuzzer started 2018/04/16 23:06:50 dialing manager at 10.128.0.26:43021 2018/04/16 23:06:57 kcov=true, comps=false 2018/04/16 23:07:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) 2018/04/16 23:07:01 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a3c000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffb) keyctl$unlink(0x9, r0, 0xfffffffffffffffb) 2018/04/16 23:07:01 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000d19fee)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{{}, 0x0, 0x100000001}, {}], 0x30) perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000d01000)=0x7) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setregset(0x4205, r2, 0x1, &(0x7f0000000280)={&(0x7f0000000100)="1956a0d9318d35d03f90c7a6ad2037dce85dfdb6a5e06a797090cc20e9f49090aeddb09b4b4a58db04f52d9ab50f4c271caa0a580193dfd6df639550d3431d19d4befe82d2afaca39a6a1a31a7c69e08b949a423ba603b90575602eabe5075ff78ac9d9e823ca4d9b1d8bd1060dd76bf9a405194dda5e42aa037490bbf42c46faa27276427f38845495ab46b8716239ac5a8ff06ca0e7747f33b12c6a20960c28ac66e144bc955561cd8751634f65bd6a89d7e0c08ad6a5d233ec7fb89db4f249d81c2205ebdc84f35870f0cea096fdeb3a319944900b116b42314ddff0616a8995d2e3d0baf7d1f53", 0xe9}) r3 = msgget(0x2, 0x4) msgrcv(r3, &(0x7f00000000c0)={0x0, ""/25}, 0x21, 0x80000000003, 0x3000) 2018/04/16 23:07:01 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8912, &(0x7f0000000100)={'ip6gretap0\x00', &(0x7f0000000040)=ANY=[]}) 2018/04/16 23:07:01 executing program 7: getcwd(&(0x7f00000001c0)=""/4096, 0x1000) 2018/04/16 23:07:01 executing program 5: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000080)={0xcaf, 0x0, 0x0, 0x0, 0x6}, 0x10) 2018/04/16 23:07:01 executing program 6: mkdir(&(0x7f0000014000)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000052fff8)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f000001effd)='/', r0, &(0x7f0000d06ff8)='./file0\x00') fchmodat(r0, &(0x7f00000000c0)='./file0\x00', 0x80) 2018/04/16 23:07:01 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a3c000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000a80)='./file0\x00', &(0x7f00000008c0)='./file0\x00', &(0x7f0000000a40)='sysfs\x00', 0x0, &(0x7f0000cde000)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xffffffffffffffca) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000564000), &(0x7f0000048000), 0x0) syzkaller login: [ 46.878165] ip (3793) used greatest stack depth: 54672 bytes left [ 47.799707] ip (3879) used greatest stack depth: 54544 bytes left [ 47.938950] ip (3894) used greatest stack depth: 54200 bytes left [ 48.144179] ip (3906) used greatest stack depth: 53960 bytes left [ 48.411625] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.418186] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.461167] device bridge_slave_0 entered promiscuous mode [ 48.538927] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.545458] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.589627] device bridge_slave_0 entered promiscuous mode [ 48.606204] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.612716] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.639529] device bridge_slave_0 entered promiscuous mode [ 48.658916] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.665545] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.687076] device bridge_slave_0 entered promiscuous mode [ 48.709985] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.716485] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.738860] device bridge_slave_0 entered promiscuous mode [ 48.751445] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.758023] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.779569] device bridge_slave_0 entered promiscuous mode [ 48.792899] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.799468] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.815866] device bridge_slave_1 entered promiscuous mode [ 48.823836] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.830848] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.848785] device bridge_slave_0 entered promiscuous mode [ 48.860650] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.867288] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.895299] device bridge_slave_1 entered promiscuous mode [ 48.913993] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.920858] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.936802] device bridge_slave_1 entered promiscuous mode [ 48.945566] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.952151] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.966190] device bridge_slave_1 entered promiscuous mode [ 48.974679] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.981249] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.995277] device bridge_slave_0 entered promiscuous mode [ 49.002799] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.009328] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.025966] device bridge_slave_1 entered promiscuous mode [ 49.035016] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 49.046463] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 49.057902] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.064515] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.104604] device bridge_slave_1 entered promiscuous mode [ 49.132932] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.139477] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.170946] device bridge_slave_1 entered promiscuous mode [ 49.195749] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 49.206387] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 49.214199] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 49.222011] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.229737] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.264537] device bridge_slave_1 entered promiscuous mode [ 49.273308] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 49.283413] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 49.292753] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 49.340721] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 49.394912] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 49.455066] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 49.468544] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 49.483225] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 49.496843] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 49.574152] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 49.704414] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 50.269250] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 50.321511] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 50.484765] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 50.496806] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 50.505251] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 50.512574] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 50.524896] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 50.551283] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 50.631661] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 50.689302] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 50.733662] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 50.763855] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 50.771477] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 50.787439] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 50.804491] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 50.936240] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 51.617717] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 51.628947] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 51.731919] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 51.776915] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 51.846780] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 51.870734] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 51.892921] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 51.902231] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 51.913268] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 51.950578] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 51.995232] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 52.008677] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 52.089801] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.097269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.112807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.136838] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.144138] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.155811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.190093] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 52.197503] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 52.205516] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 52.219561] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.226852] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.241263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.283500] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.292875] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 52.300388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.326839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.373448] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.380777] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.392562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.430523] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.438103] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.446717] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.458611] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.466772] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.489209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.518598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.549254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.568488] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.596274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.606935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.614849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.623780] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.631591] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.639072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.647272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.655751] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.664294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.679891] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.703273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.716535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.751205] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.763641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.786943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.825923] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.833230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.848289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.884988] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.892796] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.916784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.984926] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.992460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.006273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.892791] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.899312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.906238] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.912725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.984955] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.991569] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.022594] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.029139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.036109] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.042644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.070583] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 55.096407] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.102930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.109813] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.116320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.146816] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 55.163996] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.170570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.177488] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.184015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.246658] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 55.291917] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.298428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.305342] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.311840] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.358524] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 55.366148] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.372634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.379499] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.386021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.404359] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 55.447074] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.453604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.460526] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.467062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.559994] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 55.667594] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.674178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.681146] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.687666] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.770086] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 56.032938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.043758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.074774] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.111858] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.140106] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.159698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.168118] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.380293] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 64.459879] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 64.712621] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 64.796465] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 64.976214] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 65.205325] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 65.211644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.221941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.267179] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 65.273595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.292074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.322227] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 65.348120] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 65.503835] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 65.558105] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 65.564427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.575896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.609468] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 65.616383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.630905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.688989] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 65.697737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.740649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.248938] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 66.255263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.266667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.305660] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 66.311943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.326622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.394291] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 66.400598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.410988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/16 23:07:28 executing program 3: 2018/04/16 23:07:28 executing program 1: 2018/04/16 23:07:28 executing program 3: 2018/04/16 23:07:28 executing program 1: shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 2018/04/16 23:07:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80003, 0xab) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000800)=@nat={'nat\x00', 0x19, 0x2, 0x180, [0x20000400, 0x0, 0x0, 0x20000430, 0x20000698], 0x0, &(0x7f0000000040), &(0x7f0000000400)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0xb, 0x0, 0x0, 'gretap0\x00', 'dummy0\x00', 'bpq0\x00', 'syzkaller0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0x70, 0xb8, 0xf0}, [@common=@ERROR={'ERROR\x00', 0x20, {"50e313964e4758cda35d01e0db7bda2cf31aa5020efe53bada0fb91f4947"}}]}, @arpreply={'arpreply\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2}}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x1f8) 2018/04/16 23:07:28 executing program 2: r0 = socket$inet6(0xa, 0x8000000000000802, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000a29000)={&(0x7f0000fc1fe4)=@in6={0xa, 0x4e22, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c, &(0x7f0000000940)}, 0x8000) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000300)="f8", 0x1}], 0x1) 2018/04/16 23:07:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) 2018/04/16 23:07:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000c91000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffffc5}, [], {0x95}}, &(0x7f0000e6bffc)="f45010", 0x1, 0x2ae, &(0x7f000000d000)=""/153}, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000001300)='blacklist\x00', &(0x7f0000001340)={0x73, 0x79, 0x7a}, &(0x7f0000001380)='posix_acl_accessuser\x00', 0xfffffffffffffffb) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000280)=""/4096) 2018/04/16 23:07:29 executing program 0: r0 = socket$inet(0x2, 0x3, 0x80000000006) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x9) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2=0xe0000002, @in=@multicast1=0xe0000001}}, {{@in6=@local={0xfe, 0x80, [], 0xaa}}, 0x0, @in=@multicast1=0xe0000001}}, 0xe8) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @random="7d73cf61100f", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast=0xffffffff}, @igmp={0x16, 0x0, 0x0, @multicast2=0xe0000002}}}}}, &(0x7f0000000200)) 2018/04/16 23:07:29 executing program 3: r0 = memfd_create(&(0x7f0000000080)='self\x00', 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000180)=0x9c) 2018/04/16 23:07:29 executing program 2: r0 = socket$inet6(0xa, 0x8000000000000802, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000a29000)={&(0x7f0000fc1fe4)=@in6={0xa, 0x4e22, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c, &(0x7f0000000940)}, 0x8000) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000300)="f8", 0x1}], 0x1) 2018/04/16 23:07:29 executing program 1: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000040)=""/214) 2018/04/16 23:07:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000002000)={0x1}) unshare(0x0) 2018/04/16 23:07:29 executing program 5: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000c91000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffffc5}, [], {0x95}}, &(0x7f0000e6bffc)="f45010", 0x1, 0x2ae, &(0x7f000000d000)=""/153}, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000001300)='blacklist\x00', &(0x7f0000001340)={0x73, 0x79, 0x7a}, &(0x7f0000001380)='posix_acl_accessuser\x00', 0xfffffffffffffffb) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000280)=""/4096) 2018/04/16 23:07:29 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f00000000c0)) 2018/04/16 23:07:29 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x2) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) 2018/04/16 23:07:29 executing program 3: r0 = socket$inet6(0xa, 0x8000000000000802, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in={0x2, 0x4e22, @loopback=0x7f000001}, 0x10, &(0x7f0000fc8000)}, 0x0) 2018/04/16 23:07:29 executing program 1: r0 = syz_open_dev$tun(&(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) 2018/04/16 23:07:29 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) fstatfs(r0, &(0x7f0000000180)=""/123) 2018/04/16 23:07:29 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = gettid() sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}]}, 0x28}, 0x1}, 0x0) 2018/04/16 23:07:29 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000440)={0x6, 0x1, 0x9, 0x3, 0xcb0b}, 0xc) 2018/04/16 23:07:29 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x4e20}, 0x1c) recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)=""/143, 0x8f}], 0x1, &(0x7f0000000100)=""/128, 0x80}, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001000)="8e86a4b9500a1139a0d93a78de7ed00ae239537b41a4eacfcfd438dfbe84ef20bd7e66cfb9bde86f5b1d1bae840e6c373fd2d58909d8ac8f1aca1b6e95b92948d4525d", 0x43}], 0x1, &(0x7f0000002000)}, 0x8000) sendmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000002ff0)=[{&(0x7f0000000040)="bce5", 0x2}], 0x1, &(0x7f000000ae80)}, 0x0) 2018/04/16 23:07:29 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@mcast2={0xff, 0x2, [], 0x1}, @ipv4={[], [0xff, 0xff]}, @mcast1={0xff, 0x1, [], 0x1}, 0x0, 0x1ff}) 2018/04/16 23:07:29 executing program 3: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={0x0, {0x2, 0x0, @broadcast=0xffffffff}, {0x2, 0x0, @broadcast=0xffffffff}, {0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)='ipddp0\x00'}) 2018/04/16 23:07:29 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)='8', 0x1, 0x0, &(0x7f00007bcfe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/16 23:07:29 executing program 1: r0 = syz_open_dev$tun(&(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) 2018/04/16 23:07:29 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f000000f000)="240000001a00030207fffd946fa283bc04eee6d87986c49727008568b51ba3a2d188737e", 0x24}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001780)=""/4096, 0x1000}], 0x2, &(0x7f0000000200)=""/128, 0x80}, 0x0) recvmsg(r0, &(0x7f0000000440)={&(0x7f0000000180)=@can, 0x80, &(0x7f0000000580), 0x0, &(0x7f0000000600)=""/77, 0x4d}, 0x0) recvmsg(r0, &(0x7f0000000480)={&(0x7f0000000100)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000007c0)}, 0x0) recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000040)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000580)}, 0x0) recvmsg(r0, &(0x7f00000003c0)={&(0x7f0000000280)=@pppol2tp, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000001680)=""/214, 0xd6}, 0x0) 2018/04/16 23:07:29 executing program 6: syz_emit_ethernet(0x66, &(0x7f0000001280)={@link_local={0x1, 0x80, 0xc2}, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000080)) 2018/04/16 23:07:29 executing program 5: syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 2018/04/16 23:07:29 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) socketpair$inet6_sctp(0xa, 0x0, 0x84, &(0x7f0000000040)) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000100)={'IDLETIMER\x00'}, &(0x7f0000000140)=0x1e) readv(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/239, 0xef}], 0x1) r1 = epoll_create1(0x0) poll(&(0x7f00000000c0)=[{r1, 0x2283}], 0x1, 0x200) r2 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000002c0)) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0xffffffff, &(0x7f0000e1d000), 0x8) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000000)={0x4}) 2018/04/16 23:07:29 executing program 0: syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0xe0}}}}}}, 0x0) [ 73.249121] ================================================================== [ 73.256547] BUG: KMSAN: uninit-value in csum_partial_copy_to_user+0x450/0x500 [ 73.263825] CPU: 0 PID: 5838 Comm: syz-executor7 Not tainted 4.16.0+ #84 [ 73.270651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 73.279994] Call Trace: [ 73.282588] dump_stack+0x185/0x1d0 [ 73.286210] ? csum_partial_copy_to_user+0x450/0x500 [ 73.291299] kmsan_report+0x142/0x240 [ 73.295090] __msan_warning_32+0x6c/0xb0 [ 73.299151] csum_partial_copy_to_user+0x450/0x500 [ 73.304173] csum_and_copy_to_iter+0x3dc/0x2140 [ 73.308864] ? kmsan_set_origin_inline+0x6b/0x120 [ 73.313724] ? __msan_poison_alloca+0x15c/0x1d0 [ 73.318422] skb_copy_and_csum_datagram+0x6d2/0x1080 [ 73.323566] skb_copy_and_csum_datagram_msg+0x557/0x960 [ 73.328949] udpv6_recvmsg+0xc65/0x29e0 [ 73.332935] ? udp6_lib_lookup_skb+0x240/0x240 [ 73.337521] inet_recvmsg+0x4c2/0x5f0 [ 73.341321] sock_recvmsg+0x1d0/0x230 [ 73.345126] ? inet_sendpage+0x8c0/0x8c0 [ 73.349217] ___sys_recvmsg+0x3fb/0x810 [ 73.353211] ? __fget_light+0x56/0x710 [ 73.357087] ? __fdget+0x4e/0x60 [ 73.360460] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 73.365860] ? __fget_light+0x6b9/0x710 [ 73.369858] SYSC_recvmsg+0x298/0x3c0 [ 73.373672] SyS_recvmsg+0x54/0x80 [ 73.377220] do_syscall_64+0x309/0x430 [ 73.381116] ? ___sys_recvmsg+0x810/0x810 [ 73.385284] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 73.390485] RIP: 0033:0x455329 [ 73.393669] RSP: 002b:00007f0e705b5c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 73.401390] RAX: ffffffffffffffda RBX: 00007f0e705b66d4 RCX: 0000000000455329 [ 73.408667] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000013 [ 73.415941] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 73.423228] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 73.430512] R13: 0000000000000496 R14: 00000000006f9eb0 R15: 0000000000000000 [ 73.437792] [ 73.439414] Uninit was created at: [ 73.442988] kmsan_alloc_meta_for_pages+0x161/0x3a0 [ 73.448013] kmsan_alloc_page+0x82/0xe0 [ 73.451994] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 73.456750] alloc_pages_current+0x6b5/0x970 [ 73.461157] skb_page_frag_refill+0x3ba/0x5e0 [ 73.465670] sk_page_frag_refill+0xa4/0x340 [ 73.470013] __ip6_append_data+0x1a20/0x4bb0 [ 73.474440] ip6_append_data+0x40e/0x6b0 [ 73.478532] udpv6_sendmsg+0xfd5/0x45b0 [ 73.482523] inet_sendmsg+0x48d/0x740 [ 73.486345] ___sys_sendmsg+0xec0/0x1310 [ 73.490429] SYSC_sendmsg+0x2a3/0x3d0 [ 73.494220] SyS_sendmsg+0x54/0x80 [ 73.497761] do_syscall_64+0x309/0x430 [ 73.501669] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 73.506857] ================================================================== [ 73.514241] Disabling lock debugging due to kernel taint [ 73.519704] Kernel panic - not syncing: panic_on_warn set ... [ 73.519704] [ 73.527094] CPU: 0 PID: 5838 Comm: syz-executor7 Tainted: G B 4.16.0+ #84 [ 73.535236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 73.544585] Call Trace: [ 73.547183] dump_stack+0x185/0x1d0 [ 73.550816] panic+0x39d/0x940 [ 73.554039] ? csum_partial_copy_to_user+0x450/0x500 [ 73.559135] kmsan_report+0x238/0x240 [ 73.562938] __msan_warning_32+0x6c/0xb0 [ 73.566992] csum_partial_copy_to_user+0x450/0x500 [ 73.571921] csum_and_copy_to_iter+0x3dc/0x2140 [ 73.576601] ? kmsan_set_origin_inline+0x6b/0x120 [ 73.581445] ? __msan_poison_alloca+0x15c/0x1d0 [ 73.586133] skb_copy_and_csum_datagram+0x6d2/0x1080 [ 73.591241] skb_copy_and_csum_datagram_msg+0x557/0x960 [ 73.596616] udpv6_recvmsg+0xc65/0x29e0 [ 73.600611] ? udp6_lib_lookup_skb+0x240/0x240 [ 73.605215] inet_recvmsg+0x4c2/0x5f0 [ 73.609019] sock_recvmsg+0x1d0/0x230 [ 73.612836] ? inet_sendpage+0x8c0/0x8c0 [ 73.616912] ___sys_recvmsg+0x3fb/0x810 [ 73.620894] ? __fget_light+0x56/0x710 [ 73.624781] ? __fdget+0x4e/0x60 [ 73.628154] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 73.633529] ? __fget_light+0x6b9/0x710 [ 73.637517] SYSC_recvmsg+0x298/0x3c0 [ 73.641337] SyS_recvmsg+0x54/0x80 [ 73.644889] do_syscall_64+0x309/0x430 [ 73.648798] ? ___sys_recvmsg+0x810/0x810 [ 73.652966] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 73.658172] RIP: 0033:0x455329 [ 73.661372] RSP: 002b:00007f0e705b5c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 73.669095] RAX: ffffffffffffffda RBX: 00007f0e705b66d4 RCX: 0000000000455329 [ 73.676379] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000013 [ 73.683647] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 73.690931] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 73.698276] R13: 0000000000000496 R14: 00000000006f9eb0 R15: 0000000000000000 [ 73.706063] Dumping ftrace buffer: [ 73.709600] (ftrace buffer empty) [ 73.713291] Kernel Offset: disabled [ 73.716905] Rebooting in 86400 seconds..