INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.41' (ECDSA) to the list of known hosts. 2018/04/07 07:32:10 fuzzer started 2018/04/07 07:32:11 dialing manager at 10.128.0.26:38639 2018/04/07 07:32:17 kcov=true, comps=false 2018/04/07 07:32:20 executing program 0: r0 = syz_open_dev$urandom(&(0x7f000060f000)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000b21ffc)) 2018/04/07 07:32:20 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000013ff4)={@dev={0xac, 0x14}, @loopback=0x7f000001, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0xc) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000d8000)={0x0, @multicast2, @rand_addr}, &(0x7f0000b34000)=0x1) clone(0x0, &(0x7f0000b26000), &(0x7f0000ea9ffc), &(0x7f0000bf2ffc), &(0x7f00003b8f33)) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c0ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/04/07 07:32:20 executing program 7: futex(&(0x7f0000000100), 0xc, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000100), 0x0) 2018/04/07 07:32:20 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x80000000032, 0xffffffffffffffff, 0x0) seccomp(0x2, 0x0, &(0x7f0000000040)) 2018/04/07 07:32:20 executing program 2: syz_emit_ethernet(0x4e, &(0x7f000000c000)={@random="2114defa76f6", @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x3, 0x102b, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@mld={0x0, 0x0, 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}}}}, 0x0) 2018/04/07 07:32:20 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x1b, &(0x7f0000000080)={@loopback={0x0, 0x1}}, 0x14) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) close(r0) 2018/04/07 07:32:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0xc0000000000036, &(0x7f000004bb99)="dc13b51a5b31306e78dd580871ab2144ece470d734cf0195f75d34c82d9d233f08008875c4ccd64ade0e8ce0442fbc50974e8e1195c604f8000000040002663d75dd0500000000000500048a5d070838a46611f937f96f7d4ff812a8f9fc3f071be60000000000000000d359bdeb62e18a769c862f856d59f8b9f3aee345e59eee7026fe40be9cda06a2f125e2c3525ad0ffffffffffffffff3d328501902d973e668fa3f9b8974fec92b836614657ade603936ca6556ddfaeda0896440f396f4b9b3e5a2db8352780dff40bb45a7883", 0xd0) setsockopt$inet6_buf(r0, 0x29, 0x36, &(0x7f0000000000), 0x0) 2018/04/07 07:32:20 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00002bafa8)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00007e6f99), 0x0) bind$alg(r0, &(0x7f0000845000)={0x26, "68617368000000000000fa00", 0x0, 0x0, 'rmd160\x00'}, 0x58) syzkaller login: [ 42.049674] ip (3750) used greatest stack depth: 54688 bytes left [ 42.444347] ip (3785) used greatest stack depth: 54408 bytes left [ 43.781024] ip (3913) used greatest stack depth: 53960 bytes left [ 45.511747] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 45.839716] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 45.893877] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 45.918928] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 45.960247] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.014650] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.089849] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.099394] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.419818] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 54.879722] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 54.893583] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 54.939216] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 54.963301] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.015536] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.117428] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.139561] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.148798] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.155127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.172787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.588414] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.594715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.602384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.623136] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.640420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.672563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.768981] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.775279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.787831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.807106] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.813374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.824555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.848578] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.863435] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.874469] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.886292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.930886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.972150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.008675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.030606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.046102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/07 07:32:38 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000976da8)=[{{&(0x7f0000000000)=@ethernet={0x0, @remote}, 0x10, &(0x7f0000007000)=[{&(0x7f0000000040)=""/190, 0xbe}, {&(0x7f0000b16000)=""/32, 0x20}, {&(0x7f0000eb6fc3)=""/61, 0xfffffed2}], 0x3, &(0x7f0000940f43)=""/189, 0x43}}], 0x0, 0x0, &(0x7f0000b9dff0)) sendmsg$unix(0xffffffffffffffff, &(0x7f0000833000)={&(0x7f0000564000)=@abs, 0x6e, &(0x7f0000451ff0)=[{&(0x7f0000007000)="002a932f01000000cf960802e02348f800000000001c0003f2a576", 0x1b}], 0x1, &(0x7f00001f9fe0)}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000afa000)='/dev/sg#\x00', 0x0, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x80da14}) ioctl(r0, 0x2285, &(0x7f0000007000)='S') 2018/04/07 07:32:38 executing program 3: r0 = socket$inet(0xa, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x2, 0x2c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000240], 0x0, &(0x7f0000000080), &(0x7f0000000240)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{{{0x1d, 0x0, 0x0, '\x00', '\x00', '\x00', '\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [], 0x120, 0x150, 0x115, [@mark_m={'mark_m\x00', 0x18}, @stp={'stp\x00', 0x48, {{0x0, {0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}, [], 0x0, 0x0, 0x0, 0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}}}}]}, [@common=@redirect={'redirect\x00', 0x8}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}, {{{0x0, 0x0, 0x0, '\x00', '\x00', '\x00', '\x00', @empty, [], @empty, [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0x340) 2018/04/07 07:32:38 executing program 7: futex(&(0x7f000000cffc)=0x4000000004, 0x80000000000b, 0x4, &(0x7f0000000000)={0x77359400, 0x1}, &(0x7f000001d000), 0x0) futex(&(0x7f000000cffc), 0x4, 0x0, &(0x7f000000d000), &(0x7f0000048000), 0x0) 2018/04/07 07:32:38 executing program 5: syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="d7380b151bf2", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "0b8bca", 0x0, 0x29, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, [], "bdc7c7119afd4396"}}}}}}}, 0x0) 2018/04/07 07:32:38 executing program 4: keyctl$get_keyring_id(0xfffffffb, 0x0, 0x0) 2018/04/07 07:32:38 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f0000001fb8)={0x1, 0x3, &(0x7f0000003000)=@framed={{0x18, 0x6}, [], {0x95, 0xe6}}, &(0x7f0000002ff6)='syzkaller\x00', 0x5, 0x8c, &(0x7f0000002f19)=""/231}, 0x48) 2018/04/07 07:32:38 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000a87ff4)={@multicast2=0xe0000002, @loopback=0x7f000001, @multicast2=0xe0000002}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000a87ff4)={@multicast2=0xe0000002, @loopback=0x7f000001, @multicast2=0xe0000002}, 0xc) dup3(r0, r1, 0x0) 2018/04/07 07:32:38 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000015e15)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x45, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000], 0x1}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3], 0x1}, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 2018/04/07 07:32:38 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}, 0x3) 2018/04/07 07:32:39 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000006000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0x8010aa02, &(0x7f0000006ffc)={{&(0x7f0000009000/0x4000)=nil, 0x7ffffffef000}}) 2018/04/07 07:32:39 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @rand_addr}}}, &(0x7f0000002ffc)=0xa0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1000006, 0x32, 0xffffffffffffffff, 0x0) close(r0) 2018/04/07 07:32:39 executing program 1: mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000ae4000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000f8dfe0)={{&(0x7f00007c3000/0x3000)=nil, 0x3000}}) 2018/04/07 07:32:39 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000015e15)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x45, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000], 0x1}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3], 0x1}, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 2018/04/07 07:32:39 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000e15000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000402f73)="71e67a15", 0x4) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00005c8f58), 0xfffffffffffffeee, 0x0, &(0x7f0000351ff0)=@ipx={0x4, 0x0, 0x0, "a074edebb7e1"}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000ebf000), &(0x7f0000d2df20)}}, &(0x7f0000768ffc)) sched_rr_get_interval(0x0, &(0x7f0000f52ff0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000a07fe0)={{0x0, r3}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) 2018/04/07 07:32:39 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000327f68)={0x2, 0x400000000000003, 0x0, 0x3, 0x13, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_address={0x5, 0x9, 0xff, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}]}, 0x98}, 0x1}, 0x0) 2018/04/07 07:32:39 executing program 4: r0 = socket$nl_generic(0xa, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8913, &(0x7f0000000000)={'ip_vti0\x00'}) 2018/04/07 07:32:39 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000015e15)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x45, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000], 0x1}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3], 0x1}, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 2018/04/07 07:32:40 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$key(0xf, 0x3, 0x2) dup3(r0, r1, 0x0) 2018/04/07 07:32:40 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x3, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) listen(r0, 0x43) r1 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmsg$netlink(r1, &(0x7f0000005600)={0x0, 0x0, &(0x7f0000005280)=[{&(0x7f0000004240)={0x10}, 0x10}], 0x1, &(0x7f0000005500)}, 0x8000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b20000)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) dup3(r2, r0, 0x0) shutdown(r1, 0x1) 2018/04/07 07:32:40 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @rand_addr}}}, &(0x7f0000002ffc)=0xa0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1000006, 0x32, 0xffffffffffffffff, 0x0) close(r0) 2018/04/07 07:32:40 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000327f68)={0x2, 0x400000000000003, 0x0, 0x3, 0x13, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_address={0x5, 0x9, 0xff, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}]}, 0x98}, 0x1}, 0x0) 2018/04/07 07:32:40 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000015e15)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x45, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000], 0x1}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3], 0x1}, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 2018/04/07 07:32:40 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000e15000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000402f73)="71e67a15", 0x4) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00005c8f58), 0xfffffffffffffeee, 0x0, &(0x7f0000351ff0)=@ipx={0x4, 0x0, 0x0, "a074edebb7e1"}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000ebf000), &(0x7f0000d2df20)}}, &(0x7f0000768ffc)) sched_rr_get_interval(0x0, &(0x7f0000f52ff0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000a07fe0)={{0x0, r3}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) 2018/04/07 07:32:40 executing program 7: syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x4}}}}}}, 0x0) 2018/04/07 07:32:40 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0xe, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x1f, 0x0, 0x2, 0x100000001, 0x0, 0x0, 0x0, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @in=@dev={0xac, 0x14}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}, 0x1}, 0x0) 2018/04/07 07:32:40 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000015e15)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x0, 0xffffffffffffffff, @remote={0xfe, 0x45, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000], 0x1}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3], 0x1}, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 2018/04/07 07:32:40 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f000043e000)={0x1, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91) 2018/04/07 07:32:40 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0xe, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x1f, 0x0, 0x2, 0x100000001, 0x0, 0x0, 0x0, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @in=@dev={0xac, 0x14}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}, 0x1}, 0x0) 2018/04/07 07:32:40 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x84) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x76, &(0x7f0000000080)=""/4096, &(0x7f0000000040)=0x1276) 2018/04/07 07:32:40 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x62000)=nil, 0x62000, 0x0, 0x11, r0, 0x0) mremap(&(0x7f0000025000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f000002f000/0x1000)=nil) 2018/04/07 07:32:40 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000015e15)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x0, 0xffffffffffffffff, @remote={0xfe, 0x45, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000], 0x1}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3], 0x1}, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 2018/04/07 07:32:40 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000e15000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000402f73)="71e67a15", 0x4) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00005c8f58), 0xfffffffffffffeee, 0x0, &(0x7f0000351ff0)=@ipx={0x4, 0x0, 0x0, "a074edebb7e1"}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000ebf000), &(0x7f0000d2df20)}}, &(0x7f0000768ffc)) sched_rr_get_interval(0x0, &(0x7f0000f52ff0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000a07fe0)={{0x0, r3}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) 2018/04/07 07:32:40 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @rand_addr}}}, &(0x7f0000002ffc)=0xa0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1000006, 0x32, 0xffffffffffffffff, 0x0) close(r0) 2018/04/07 07:32:40 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = dup(r2) getsockopt$inet6_tcp_int(r3, 0x6, 0x1f, &(0x7f0000000080), &(0x7f0000012ffc)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) 2018/04/07 07:32:41 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000015e15)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x0, 0xffffffffffffffff, @remote={0xfe, 0x45, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000], 0x1}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3], 0x1}, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 2018/04/07 07:32:41 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x84) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x76, &(0x7f0000000080)=""/4096, &(0x7f0000000040)=0x1276) 2018/04/07 07:32:41 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000062ffa8)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) sendmmsg$alg(r1, &(0x7f00002f4000)=[{0x0, 0x0, &(0x7f00009cbfa0)}], 0x1, 0x0) fallocate(r2, 0x0, 0x0, 0x9) sendfile(r1, r2, &(0x7f0000e64ff8), 0x100000001) 2018/04/07 07:32:41 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0xe, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x1f, 0x0, 0x2, 0x100000001, 0x0, 0x0, 0x0, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @in=@dev={0xac, 0x14}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}, 0x1}, 0x0) 2018/04/07 07:32:41 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000ffc), &(0x7f0000013000)=0xfffffffffffffe9c) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r0) [ 60.237825] ================================================================== [ 60.245244] BUG: KMSAN: uninit-value in crc_t10dif_generic+0x155/0x1b0 [ 60.251912] CPU: 1 PID: 5207 Comm: syz-executor7 Not tainted 4.16.0+ #81 [ 60.258742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 60.268096] Call Trace: [ 60.270691] dump_stack+0x185/0x1d0 [ 60.274327] ? crc_t10dif_generic+0x155/0x1b0 [ 60.278826] kmsan_report+0x142/0x240 [ 60.282634] __msan_warning_32+0x6c/0xb0 2018/04/07 07:32:41 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000015e15)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000], 0x1}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x14], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5], 0x1}, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 60.286702] crc_t10dif_generic+0x155/0x1b0 [ 60.291028] chksum_update+0xb4/0x140 [ 60.294834] ? chksum_init+0x80/0x80 [ 60.298544] shash_async_update+0x290/0x360 [ 60.302875] ? shash_async_init+0x270/0x270 [ 60.307196] hash_sendpage+0x904/0xe10 [ 60.311090] ? hash_recvmsg+0xd50/0xd50 [ 60.315064] sock_sendpage+0x1de/0x2c0 [ 60.318965] pipe_to_sendpage+0x31b/0x430 [ 60.323112] ? sock_fasync+0x2b0/0x2b0 [ 60.327005] ? propagate_umount+0x3a30/0x3a30 [ 60.331501] __splice_from_pipe+0x49a/0xf30 2018/04/07 07:32:41 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000015e15)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0x0, @remote={0xfe, 0x45, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000], 0x1}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3], 0x1}, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 2018/04/07 07:32:41 executing program 0: capset(&(0x7f0000f4b000)={0x19980330}, &(0x7f0000fc0fe8)) clone(0x959c8ac90dd9197e, &(0x7f000001d000), &(0x7f0000a9dffc), &(0x7f000079f000), &(0x7f0000f4c000)) [ 60.335822] ? generic_splice_sendpage+0x2a0/0x2a0 [ 60.340759] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 60.346124] generic_splice_sendpage+0x1c6/0x2a0 [ 60.350892] ? iter_file_splice_write+0x1710/0x1710 [ 60.355912] ? iter_file_splice_write+0x1710/0x1710 [ 60.360932] direct_splice_actor+0x19b/0x200 [ 60.365355] splice_direct_to_actor+0x764/0x1040 [ 60.370115] ? do_splice_direct+0x540/0x540 [ 60.374446] ? security_file_permission+0x28f/0x4b0 [ 60.379470] ? rw_verify_area+0x35e/0x580 [ 60.383631] do_splice_direct+0x335/0x540 [ 60.387787] do_sendfile+0x1067/0x1e40 [ 60.391693] SYSC_sendfile64+0x1b3/0x300 [ 60.395763] SyS_sendfile64+0x64/0x90 [ 60.399569] do_syscall_64+0x309/0x430 [ 60.403461] ? SYSC_sendfile+0x320/0x320 [ 60.407528] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 60.410546] capability: warning: `syz-executor0' uses 32-bit capabilities (legacy support in use) [ 60.412711] RIP: 0033:0x455259 [ 60.412720] RSP: 002b:00007f12b1071c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 60.412734] RAX: ffffffffffffffda RBX: 00007f12b10726d4 RCX: 0000000000455259 [ 60.412742] RDX: 0000000020e64ff8 RSI: 0000000000000015 RDI: 0000000000000014 [ 60.412749] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 60.412758] R10: 0000000100000001 R11: 0000000000000246 R12: 00000000ffffffff [ 60.412765] R13: 00000000000004c6 R14: 00000000006fa330 R15: 0000000000000000 [ 60.412775] [ 60.412778] Uninit was created at: [ 60.412795] kmsan_alloc_meta_for_pages+0x161/0x3a0 [ 60.412806] kmsan_alloc_page+0x82/0xe0 [ 60.412821] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 60.412832] alloc_pages_vma+0xcc8/0x1800 [ 60.412846] shmem_alloc_and_acct_page+0x6d5/0x1000 [ 60.412857] shmem_getpage_gfp+0x35db/0x5770 [ 60.412869] shmem_fallocate+0xde2/0x1610 [ 60.412879] vfs_fallocate+0x9dc/0xde0 [ 60.412890] SYSC_fallocate+0x119/0x1d0 [ 60.412899] SyS_fallocate+0x64/0x90 [ 60.412909] do_syscall_64+0x309/0x430 [ 60.412921] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 60.412941] Disabling lock debugging due to kernel taint [ 60.531590] Kernel panic - not syncing: panic_on_warn set ... [ 60.531590] [ 60.538964] CPU: 1 PID: 5207 Comm: syz-executor7 Tainted: G B 4.16.0+ #81 [ 60.547098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 60.556437] Call Trace: [ 60.559033] dump_stack+0x185/0x1d0 [ 60.562658] panic+0x39d/0x940 [ 60.565854] ? crc_t10dif_generic+0x155/0x1b0 [ 60.570329] kmsan_report+0x238/0x240 [ 60.574124] __msan_warning_32+0x6c/0xb0 [ 60.578179] crc_t10dif_generic+0x155/0x1b0 [ 60.582493] chksum_update+0xb4/0x140 [ 60.586293] ? chksum_init+0x80/0x80 [ 60.589994] shash_async_update+0x290/0x360 [ 60.594303] ? shash_async_init+0x270/0x270 [ 60.598614] hash_sendpage+0x904/0xe10 [ 60.602502] ? hash_recvmsg+0xd50/0xd50 [ 60.606477] sock_sendpage+0x1de/0x2c0 [ 60.610361] pipe_to_sendpage+0x31b/0x430 [ 60.614510] ? sock_fasync+0x2b0/0x2b0 [ 60.618393] ? propagate_umount+0x3a30/0x3a30 [ 60.622882] __splice_from_pipe+0x49a/0xf30 [ 60.627191] ? generic_splice_sendpage+0x2a0/0x2a0 [ 60.632118] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 60.637474] generic_splice_sendpage+0x1c6/0x2a0 [ 60.642229] ? iter_file_splice_write+0x1710/0x1710 [ 60.647234] ? iter_file_splice_write+0x1710/0x1710 [ 60.652241] direct_splice_actor+0x19b/0x200 [ 60.656644] splice_direct_to_actor+0x764/0x1040 [ 60.661393] ? do_splice_direct+0x540/0x540 [ 60.665707] ? security_file_permission+0x28f/0x4b0 [ 60.670712] ? rw_verify_area+0x35e/0x580 [ 60.674863] do_splice_direct+0x335/0x540 [ 60.679010] do_sendfile+0x1067/0x1e40 [ 60.682910] SYSC_sendfile64+0x1b3/0x300 [ 60.686966] SyS_sendfile64+0x64/0x90 [ 60.690745] do_syscall_64+0x309/0x430 [ 60.694631] ? SYSC_sendfile+0x320/0x320 [ 60.698686] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 60.703861] RIP: 0033:0x455259 [ 60.707042] RSP: 002b:00007f12b1071c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 60.714744] RAX: ffffffffffffffda RBX: 00007f12b10726d4 RCX: 0000000000455259 [ 60.721996] RDX: 0000000020e64ff8 RSI: 0000000000000015 RDI: 0000000000000014 [ 60.729257] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 60.736508] R10: 0000000100000001 R11: 0000000000000246 R12: 00000000ffffffff [ 60.743767] R13: 00000000000004c6 R14: 00000000006fa330 R15: 0000000000000000 [ 60.751475] Dumping ftrace buffer: [ 60.755003] (ftrace buffer empty) [ 60.758687] Kernel Offset: disabled [ 60.762288] Rebooting in 86400 seconds..