[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 30.767729] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 33.539300] random: sshd: uninitialized urandom read (32 bytes read) [ 33.962891] random: sshd: uninitialized urandom read (32 bytes read) [ 35.276978] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.22' (ECDSA) to the list of known hosts. [ 40.812768] random: sshd: uninitialized urandom read (32 bytes read) 2018/05/18 19:15:22 fuzzer started 2018/05/18 19:15:23 dialing manager at 10.128.0.26:44713 [ 63.506361] can: request_module (can-proto-0) failed. [ 63.518106] can: request_module (can-proto-0) failed. 2018/05/18 19:15:47 kcov=true, comps=false 2018/05/18 19:15:52 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair(0xe29441c203b8fe43, 0x6, 0x10001, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000140)={0x8, {{0x2, 0x4e24, @multicast2=0xe0000002}}, {{0x2, 0x4e24, @multicast2=0xe0000002}}}, 0x108) connect$netlink(r0, &(0x7f00000000c0)=@unspec, 0xc) r2 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x0, 0x0, &(0x7f0000000000)) mq_timedreceive(r2, &(0x7f0000000040)=""/114, 0xfffffffffffffe05, 0xfffffffffffffffb, 0x0) 2018/05/18 19:15:52 executing program 2: io_setup(0x800000020, &(0x7f0000000040)=0x0) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000928fc0)={0x0, 0x0, 0xeffdffffffffffff, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000ddc000), 0x0, 0x0, 0x100000000000000}]) 2018/05/18 19:15:52 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/netlink\x00') sendfile(r0, r1, &(0x7f0000000340), 0x800009) 2018/05/18 19:15:52 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) 2018/05/18 19:15:52 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) ppoll(&(0x7f0000000000)=[{r1}, {r1}], 0x2, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f0000000140), 0x8) 2018/05/18 19:15:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="3000000018000b0e00000000000000000a000000000000000000000014000500fe80000000000000000009ffffffe601"], 0x1}, 0x1}, 0x0) 2018/05/18 19:15:52 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(r1, &(0x7f0000000100)={[0x38]}, 0x1) 2018/05/18 19:15:52 executing program 6: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)="4626262c8523") r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000200)=0x78, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xffffffffffffffbc, 0x20000000, &(0x7f0000000140)={0x2, 0x1000004e23, @loopback=0x7f000001}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f00000000c0)="53ea3af5", 0x4, 0x0, &(0x7f0000000080)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000100)=0x3, 0x4) [ 71.371422] IPVS: ftp: loaded support on port[0] = 21 [ 71.431439] IPVS: ftp: loaded support on port[0] = 21 [ 71.442883] IPVS: ftp: loaded support on port[0] = 21 [ 71.443592] IPVS: ftp: loaded support on port[0] = 21 [ 71.486141] IPVS: ftp: loaded support on port[0] = 21 [ 71.497415] IPVS: ftp: loaded support on port[0] = 21 [ 71.506470] IPVS: ftp: loaded support on port[0] = 21 [ 71.523493] IPVS: ftp: loaded support on port[0] = 21 [ 73.613646] ip (4731) used greatest stack depth: 53912 bytes left [ 74.796978] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.803550] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.830953] device bridge_slave_0 entered promiscuous mode [ 74.871991] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.878546] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.896585] device bridge_slave_0 entered promiscuous mode [ 74.948664] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.955192] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.003211] device bridge_slave_0 entered promiscuous mode [ 75.048350] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.054866] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.078111] device bridge_slave_0 entered promiscuous mode [ 75.086995] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.093586] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.104414] device bridge_slave_0 entered promiscuous mode [ 75.114145] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.120614] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.134975] device bridge_slave_1 entered promiscuous mode [ 75.147902] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.154390] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.180170] device bridge_slave_1 entered promiscuous mode [ 75.208969] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.215534] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.225097] device bridge_slave_0 entered promiscuous mode [ 75.236767] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.243270] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.264233] device bridge_slave_0 entered promiscuous mode [ 75.279031] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.285553] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.302593] device bridge_slave_1 entered promiscuous mode [ 75.310541] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.317003] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.328214] device bridge_slave_0 entered promiscuous mode [ 75.342342] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 75.360531] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.367133] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.397838] device bridge_slave_1 entered promiscuous mode [ 75.404296] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.410849] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.437174] device bridge_slave_1 entered promiscuous mode [ 75.452826] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.459295] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.473835] device bridge_slave_1 entered promiscuous mode [ 75.488980] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.495650] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.525299] device bridge_slave_1 entered promiscuous mode [ 75.538813] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 75.558996] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 75.571066] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.577545] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.589730] device bridge_slave_1 entered promiscuous mode [ 75.616510] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 75.625874] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 75.637199] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 75.645813] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 75.653576] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 75.753231] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 75.766237] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 75.823202] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 75.832611] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 75.886772] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 75.896716] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 75.948324] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 76.008966] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 76.304555] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 76.338933] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 76.431403] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 76.466086] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 76.522747] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 76.553193] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 76.566125] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 76.579898] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 76.606152] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 76.624387] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 76.658200] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 76.691933] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 76.802339] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 76.831643] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 76.854334] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 76.879066] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 76.891700] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 76.900677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.926396] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 76.934937] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 76.942691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.979475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.016577] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 77.023657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.063027] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 77.070820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.099480] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 77.106568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.125910] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 77.138498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.169537] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 77.185135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.209456] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 77.216493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.244244] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 77.262906] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 77.270348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.322928] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.357525] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 77.369171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.409617] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 77.418241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.463076] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 77.471392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.678194] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 77.710893] team0: Port device team_slave_0 added [ 77.744133] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 77.773878] team0: Port device team_slave_0 added [ 77.837198] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 77.863305] team0: Port device team_slave_0 added [ 77.888694] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 77.911178] team0: Port device team_slave_1 added [ 77.947611] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 77.973065] team0: Port device team_slave_1 added [ 77.980638] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 77.996429] team0: Port device team_slave_0 added [ 78.020209] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 78.038345] team0: Port device team_slave_0 added [ 78.055416] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 78.065525] team0: Port device team_slave_1 added [ 78.086802] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 78.110922] team0: Port device team_slave_0 added [ 78.125653] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 78.143239] team0: Port device team_slave_0 added [ 78.171929] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 78.179080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.192353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.216869] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 78.223976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.235246] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.265392] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 78.281188] team0: Port device team_slave_0 added [ 78.288786] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 78.305179] team0: Port device team_slave_1 added [ 78.323391] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 78.337282] team0: Port device team_slave_1 added [ 78.352800] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 78.361300] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 78.374253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.393227] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.424381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.444271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.465957] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 78.473916] team0: Port device team_slave_1 added [ 78.480625] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 78.488498] team0: Port device team_slave_1 added [ 78.513844] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 78.521852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.544228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.562636] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 78.571538] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 78.578584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.605249] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.614107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.623343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.633561] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 78.642945] team0: Port device team_slave_1 added [ 78.649610] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 78.658623] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 78.676174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.685848] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.725932] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.742145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.766201] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 78.774895] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 78.784268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.798617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.806752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.815536] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.826967] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 78.834754] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 78.848195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.863349] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.877804] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.897672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.919291] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 78.928218] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 78.935773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.956642] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.974848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.989242] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.998834] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 79.008257] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 79.030785] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 79.039687] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 79.061015] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 79.068961] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.086743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.117257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.140152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.161715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.179997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.189746] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.197838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.206177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.213948] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.222279] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 79.229851] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.238561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.266545] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 79.274205] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 79.282181] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 79.292946] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 79.307787] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 79.317211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.353158] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.400367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.443784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.469875] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.478519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.486703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.494820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.502902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.510706] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.525626] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 79.548590] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 79.556112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.579252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.606779] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.623112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.649078] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 79.656721] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 79.681917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.707902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.737283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.765127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.832250] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 79.839823] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.857341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.912282] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 79.919769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.944890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.554668] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.561156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.567969] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.574416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.618093] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 81.625897] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.670786] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.677290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.684174] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.690637] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.764970] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 81.779824] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.786299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.793143] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.799629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.818653] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 81.842847] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.849333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.856177] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.862626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.903874] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 81.913474] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.920082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.926868] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.933332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.945399] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 82.125810] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.132303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.139164] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.145609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.170201] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 82.372243] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.378754] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.385617] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.392112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.441747] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 82.450597] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.457079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.463803] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.470189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.479129] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 82.655451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.666812] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.686962] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.694648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.702485] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.710310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.718124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.330610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.409129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.470240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.558430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.760481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.041996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.133318] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 91.222444] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 91.234912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.366167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.400308] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 91.409865] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 91.645379] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 91.896254] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 91.913899] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 91.920350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 91.928806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.039686] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 92.046178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.059632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.105763] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 92.171222] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 92.223754] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 92.230377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.239221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.280808] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 92.292431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.304755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.555189] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 92.561947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.570349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.743183] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.837719] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 92.844439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.863862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.911099] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.939845] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 92.946401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.957451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.998637] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 93.005669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.016274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.137124] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.201114] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.501731] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.639457] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.746235] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.853571] 8021q: adding VLAN 0 to HW filter on device team0 2018/05/18 19:16:19 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/netlink\x00') sendfile(r0, r1, &(0x7f0000000340), 0x800009) 2018/05/18 19:16:20 executing program 2: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x1, 0x8}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local={0xfe, 0x80, [], 0xaa}, 0x800, 0x2}, 0x20) 2018/05/18 19:16:20 executing program 7: r0 = memfd_create(&(0x7f0000000300)="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", 0x2) write(r0, &(0x7f0000000040)="16", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) fcntl$addseals(r0, 0x409, 0x0) ftruncate(r0, 0x8) fremovexattr(r0, &(0x7f0000000180)=@known='security.ima\x00') 2018/05/18 19:16:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) ioctl$TIOCLINUX3(0xffffffffffffffff, 0x541c, &(0x7f0000000040)=0x3) 2018/05/18 19:16:21 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2=0xe0000002}, 0x4}}, 0x2e) 2018/05/18 19:16:21 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="8100756994094bd7f1586f") getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x2, 0x14, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 2018/05/18 19:16:21 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='illinois\x00', 0x9) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/05/18 19:16:21 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001380)='veno\x00', 0x5) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/05/18 19:16:21 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000080)=0x80000000002, 0x4) sendto$inet(r0, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2018/05/18 19:16:21 executing program 3: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a") fcntl$setstatus(r1, 0x4, 0x4000) sendfile(r0, r1, &(0x7f00000000c0), 0x80000002) keyctl$set_reqkey_keyring(0xe, 0x3) 2018/05/18 19:16:21 executing program 6: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)="4626262c8523") r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000200)=0x78, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xffffffffffffffbc, 0x20000000, &(0x7f0000000140)={0x2, 0x1000004e23, @loopback=0x7f000001}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f00000000c0)="53ea3af5", 0x4, 0x0, &(0x7f0000000080)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000100)=0x3, 0x4) 2018/05/18 19:16:21 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000280)='m', 0x1, 0x20000803, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0x0, &(0x7f00000000c0)={0x2}, 0x10) read(r0, &(0x7f0000000180)=""/116, 0x1000003c4) 2018/05/18 19:16:21 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="8100756994094bd7f1586f") getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x2, 0x14, &(0x7f0000000000), &(0x7f00000000c0)=0x4) [ 99.558777] ================================================================== [ 99.566211] BUG: KMSAN: uninit-value in netlink_rcv_skb+0x3e3/0x600 [ 99.572630] CPU: 1 PID: 6657 Comm: syz-executor3 Not tainted 4.17.0-rc5+ #99 [ 99.579824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 99.589172] Call Trace: [ 99.591760] dump_stack+0x185/0x1d0 [ 99.595394] ? netlink_rcv_skb+0x3e3/0x600 [ 99.599643] kmsan_report+0x149/0x260 [ 99.603457] __msan_warning_32+0x6e/0xc0 [ 99.607528] netlink_rcv_skb+0x3e3/0x600 [ 99.611589] ? rtnetlink_bind+0x120/0x120 [ 99.615739] rtnetlink_rcv+0x50/0x60 [ 99.619455] netlink_unicast+0x166b/0x1740 [ 99.623699] ? rtnetlink_net_exit+0xa0/0xa0 [ 99.628038] netlink_sendmsg+0x1072/0x1370 [ 99.632294] kernel_sendmsg+0x228/0x2d0 [ 99.636274] ? netlink_getsockopt+0xc80/0xc80 [ 99.640769] sock_no_sendpage+0x1c8/0x250 [ 99.644941] ? sock_no_mmap+0x30/0x30 [ 99.648754] sock_sendpage+0x1de/0x2c0 [ 99.652662] pipe_to_sendpage+0x31b/0x430 [ 99.656812] ? sock_fasync+0x2b0/0x2b0 [ 99.660729] ? generic_pipe_buf_get+0xf0/0xf0 [ 99.665243] __splice_from_pipe+0x49a/0xf30 [ 99.669576] ? generic_splice_sendpage+0x2a0/0x2a0 [ 99.674524] generic_splice_sendpage+0x1c6/0x2a0 [ 99.679322] ? iter_file_splice_write+0x1710/0x1710 [ 99.684342] ? iter_file_splice_write+0x1710/0x1710 [ 99.689360] direct_splice_actor+0x19b/0x200 [ 99.693791] splice_direct_to_actor+0x764/0x1040 [ 99.698559] ? do_splice_direct+0x540/0x540 [ 99.702888] ? security_file_permission+0x269/0x490 [ 99.707925] do_splice_direct+0x335/0x540 [ 99.712099] do_sendfile+0x1067/0x1e40 [ 99.716002] __x64_sys_sendfile64+0x218/0x390 [ 99.720520] do_syscall_64+0x154/0x220 [ 99.724422] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 99.729618] RIP: 0033:0x455a09 [ 99.732806] RSP: 002b:00007f8a0ad27c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 99.740514] RAX: ffffffffffffffda RBX: 00007f8a0ad286d4 RCX: 0000000000455a09 [ 99.747787] RDX: 00000000200000c0 RSI: 0000000000000014 RDI: 0000000000000013 [ 99.755085] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 99.762354] R10: 0000000080000002 R11: 0000000000000246 R12: 00000000ffffffff [ 99.769619] R13: 0000000000000579 R14: 00000000006fc3f8 R15: 0000000000000000 [ 99.776896] [ 99.778517] Uninit was stored to memory at: [ 99.782859] kmsan_internal_chain_origin+0x12b/0x210 [ 99.787975] kmsan_memcpy_origins+0x11d/0x170 [ 99.792474] __msan_memcpy+0x109/0x160 [ 99.796363] _copy_from_iter_full+0xdfc/0x1450 [ 99.800939] netlink_sendmsg+0xe1c/0x1370 [ 99.805092] kernel_sendmsg+0x228/0x2d0 [ 99.809080] sock_no_sendpage+0x1c8/0x250 [ 99.813230] sock_sendpage+0x1de/0x2c0 [ 99.817113] pipe_to_sendpage+0x31b/0x430 [ 99.821254] __splice_from_pipe+0x49a/0xf30 [ 99.825581] generic_splice_sendpage+0x1c6/0x2a0 [ 99.830344] direct_splice_actor+0x19b/0x200 [ 99.834759] splice_direct_to_actor+0x764/0x1040 [ 99.839528] do_splice_direct+0x335/0x540 [ 99.843681] do_sendfile+0x1067/0x1e40 [ 99.847589] __x64_sys_sendfile64+0x218/0x390 [ 99.852096] do_syscall_64+0x154/0x220 [ 99.856009] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 99.861190] Uninit was created at: [ 99.864757] kmsan_alloc_meta_for_pages+0x161/0x3a0 [ 99.869771] kmsan_alloc_page+0x82/0xe0 [ 99.873749] __alloc_pages_nodemask+0xf8e/0x5dd0 [ 99.878497] alloc_pages_current+0x6b5/0x970 [ 99.882907] push_pipe+0x680/0xca0 [ 99.886450] iov_iter_get_pages+0x1357/0x1810 [ 99.890975] __blockdev_direct_IO+0x1a4d/0x6580 [ 99.895639] ext4_direct_IO+0xed8/0x27c0 [ 99.899707] generic_file_read_iter+0x3bd2/0x4440 [ 99.904558] ext4_file_read_iter+0x30f/0x520 [ 99.908959] generic_file_splice_read+0x5d2/0x900 [ 99.913808] splice_direct_to_actor+0x4c6/0x1040 [ 99.918577] do_splice_direct+0x335/0x540 [ 99.922728] do_sendfile+0x1067/0x1e40 [ 99.926626] __x64_sys_sendfile64+0x218/0x390 [ 99.931121] do_syscall_64+0x154/0x220 [ 99.935010] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 99.940195] ================================================================== [ 99.947552] Disabling lock debugging due to kernel taint [ 99.952996] Kernel panic - not syncing: panic_on_warn set ... [ 99.952996] [ 99.960365] CPU: 1 PID: 6657 Comm: syz-executor3 Tainted: G B 4.17.0-rc5+ #99 [ 99.968939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 99.978285] Call Trace: [ 99.980908] dump_stack+0x185/0x1d0 [ 99.984541] panic+0x39d/0x940 [ 99.987756] ? netlink_rcv_skb+0x3e3/0x600 [ 99.991996] kmsan_report+0x260/0x260 [ 99.995811] __msan_warning_32+0x6e/0xc0 [ 99.999876] netlink_rcv_skb+0x3e3/0x600 [ 100.003943] ? rtnetlink_bind+0x120/0x120 [ 100.008101] rtnetlink_rcv+0x50/0x60 [ 100.011929] netlink_unicast+0x166b/0x1740 [ 100.016197] ? rtnetlink_net_exit+0xa0/0xa0 [ 100.020545] netlink_sendmsg+0x1072/0x1370 [ 100.024813] kernel_sendmsg+0x228/0x2d0 [ 100.028811] ? netlink_getsockopt+0xc80/0xc80 [ 100.033334] sock_no_sendpage+0x1c8/0x250 [ 100.037517] ? sock_no_mmap+0x30/0x30 [ 100.041353] sock_sendpage+0x1de/0x2c0 [ 100.045265] pipe_to_sendpage+0x31b/0x430 [ 100.049437] ? sock_fasync+0x2b0/0x2b0 [ 100.053364] ? generic_pipe_buf_get+0xf0/0xf0 [ 100.057893] __splice_from_pipe+0x49a/0xf30 [ 100.062249] ? generic_splice_sendpage+0x2a0/0x2a0 [ 100.067224] generic_splice_sendpage+0x1c6/0x2a0 [ 100.072019] ? iter_file_splice_write+0x1710/0x1710 [ 100.077068] ? iter_file_splice_write+0x1710/0x1710 [ 100.082117] direct_splice_actor+0x19b/0x200 [ 100.086563] splice_direct_to_actor+0x764/0x1040 [ 100.091352] ? do_splice_direct+0x540/0x540 [ 100.095691] ? security_file_permission+0x269/0x490 [ 100.100717] do_splice_direct+0x335/0x540 [ 100.104861] do_sendfile+0x1067/0x1e40 [ 100.108750] __x64_sys_sendfile64+0x218/0x390 [ 100.113245] do_syscall_64+0x154/0x220 [ 100.117136] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 100.122326] RIP: 0033:0x455a09 [ 100.125502] RSP: 002b:00007f8a0ad27c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 100.133197] RAX: ffffffffffffffda RBX: 00007f8a0ad286d4 RCX: 0000000000455a09 [ 100.140469] RDX: 00000000200000c0 RSI: 0000000000000014 RDI: 0000000000000013 [ 100.147737] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 100.155006] R10: 0000000080000002 R11: 0000000000000246 R12: 00000000ffffffff [ 100.162277] R13: 0000000000000579 R14: 00000000006fc3f8 R15: 0000000000000000 [ 100.170052] Dumping ftrace buffer: [ 100.173600] (ftrace buffer empty) [ 100.177291] Kernel Offset: disabled [ 100.180905] Rebooting in 86400 seconds..