INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.46' (ECDSA) to the list of known hosts. 2018/04/19 08:40:05 fuzzer started 2018/04/19 08:40:06 dialing manager at 10.128.0.26:42695 2018/04/19 08:40:12 kcov=true, comps=false 2018/04/19 08:40:15 executing program 0: r0 = memfd_create(&(0x7f0000002901)='dev ', 0x0) write(r0, &(0x7f0000000180)="665083ba86fda6159e97191351aa953245690300df2ed980", 0x18) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000), &(0x7f0000000140)) 2018/04/19 08:40:15 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/04/19 08:40:15 executing program 7: perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a3c000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x3, 0x5f) sendto$inet(r0, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) 2018/04/19 08:40:15 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d16ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000017a000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f0000000200), 0x49249249249269e, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000a27ff8)) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)={@broadcast=0xffffffff, @loopback=0x7f000001}, 0x8) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/33, 0x21}], 0x1) 2018/04/19 08:40:15 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x101902) r1 = memfd_create(&(0x7f0000000400)='/dev/loop#\x00', 0x3) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, "6df1733d7a8a242fd899e0633f5fcea8fb5a550ed80ebba4d909c7a124d8ac39add13dc93a80f22ff9fd35a844f3e8b5ade4e5935137af6fe251190634435dca", "6aaba7b936009877bd21673a086b8220febadc5ca0c0caf1f4797b9fc9c53bcf5a7914321fdaee090426b5018b54096bdaacf1e7a2fb27febc2e8d7b46599493", "ecd2881042e088581e6e599a554fb51faf1f720d7b000002d32112b2bc83d72a"}) 2018/04/19 08:40:15 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1=0xe0000001}}}, 0x80, &(0x7f0000001880), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6000000000000000840000000104000019945cfea64bd31afeccefe5b5fcf34f0793de00b839aaafeb9e389d43108803680293ea4552558846919efc2c8041465fc69f3050f3d3c8fefa5780266fe8b1fd9df339511400000000580000000000000000000000ff7f00001111a406f650"], 0x70}}], 0x2, 0x0) 2018/04/19 08:40:15 executing program 5: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x101902) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, "6df1733d7a8a242fd899e0633f5fcea8fb5a550ed80ebba4d909c7a124d8ac39add13dc93a80f22ff9fd35a844f3e8b5ade4e5935137af6fe251190634435dca", "6aaba7a936009867bd21673a08478220febadc5ca0c0caf1f4833b9ff18a89a285f049691fdaee090426b5018b54096bdaacf1e7a2fb27febc2e8d7b46599493", "ecd2881042e088581e6e599a5591e6c882e32e7ea6697b93d32112b2bc83d72a"}) 2018/04/19 08:40:15 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/fib_triestat\x00') sendfile(r0, r0, &(0x7f0000000040), 0x7fff) syzkaller login: [ 42.753145] ip (3754) used greatest stack depth: 54688 bytes left [ 43.197940] ip (3790) used greatest stack depth: 54672 bytes left [ 43.472840] ip (3818) used greatest stack depth: 54312 bytes left [ 44.360440] ip (3902) used greatest stack depth: 54296 bytes left [ 44.478675] ip (3913) used greatest stack depth: 54200 bytes left [ 44.683257] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.689743] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.734845] device bridge_slave_0 entered promiscuous mode [ 44.744769] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.751279] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.770889] device bridge_slave_0 entered promiscuous mode [ 44.815386] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.821954] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.844421] device bridge_slave_0 entered promiscuous mode [ 44.884448] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.890953] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.927164] device bridge_slave_0 entered promiscuous mode [ 44.950012] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.956565] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.985917] device bridge_slave_1 entered promiscuous mode [ 45.014760] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.021336] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.032099] device bridge_slave_0 entered promiscuous mode [ 45.046007] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.052602] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.061466] device bridge_slave_1 entered promiscuous mode [ 45.068272] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.074726] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.096286] device bridge_slave_0 entered promiscuous mode [ 45.110605] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.117105] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.139536] device bridge_slave_0 entered promiscuous mode [ 45.149725] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.156258] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.180894] device bridge_slave_1 entered promiscuous mode [ 45.190948] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.197451] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.218741] device bridge_slave_1 entered promiscuous mode [ 45.228397] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.239215] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.245680] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.265133] device bridge_slave_0 entered promiscuous mode [ 45.286786] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.294380] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.300829] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.333794] device bridge_slave_1 entered promiscuous mode [ 45.349734] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.356219] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.393119] device bridge_slave_1 entered promiscuous mode [ 45.404533] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.414664] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.422212] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.429749] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.436253] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.485114] device bridge_slave_1 entered promiscuous mode [ 45.494773] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.501250] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.533143] device bridge_slave_1 entered promiscuous mode [ 45.554307] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.561886] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.608416] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.634145] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.641916] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.686639] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.729838] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.788190] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.829071] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.897883] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.977509] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.309929] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.483173] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.551136] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.618268] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.654552] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.766109] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.792809] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.824662] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.847522] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.884207] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.947243] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.990157] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.029950] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.072536] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.188964] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.230175] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.439653] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.704967] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.776989] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.851373] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.896241] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.936097] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.943353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.961984] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.007861] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.062240] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.083410] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.094017] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.101831] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.186612] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.197685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.213946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.253007] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.260721] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.277629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.311433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.350533] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.358640] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.366339] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.377280] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.385460] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.392682] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.399894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.408463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.459696] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.482121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.508549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.523508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.540240] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.554762] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.564339] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.588199] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.619946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.656669] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.663861] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.675981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.705704] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.719950] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.731786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.757790] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.765676] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.780256] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.807390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.829936] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.859769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.876667] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.897832] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.905742] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.936114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.966790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.987766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.013781] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.038288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.050275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.077970] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.085267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.105937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.158893] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.166136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.193019] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.694505] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.701091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.707987] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.714474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.778546] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.785923] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.818238] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.824726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.831586] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.838127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.861647] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.175898] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.182413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.189301] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.195769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.248863] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.258724] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.265228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.272109] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.278571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.286804] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.319598] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.326112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.332993] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.339460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.382329] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.527462] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.533941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.540772] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.547226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.581936] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.599331] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.605806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.612672] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.619179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.639932] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.651937] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.658399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.665405] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.671874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.766769] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.808172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.832709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.861813] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.884741] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.907457] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.934547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.942996] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.169898] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.509264] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.736310] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.806443] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.902456] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.949310] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.956000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.969878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.091732] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.196834] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.247478] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.340241] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.346522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.354473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.518132] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.524435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.537651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.646208] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.652510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.665366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.755587] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.761878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.773156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.880442] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.886748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.897456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.023267] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.029584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.040620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.078155] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.085168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.094913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/19 08:40:41 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1=0xe0000001}}}, 0x80, &(0x7f0000001880), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6000000000000000840000000104000019945cfea64bd31afeccefe5b5fcf34f0793de00b839aaafeb9e389d43108803680293ea4552558846919efc2c8041465fc69f3050f3d3c8fefa5780266fe8b1fd9df339511400000000580000000000000000000000ff7f00001111a406f650"], 0x70}}], 0x2, 0x0) 2018/04/19 08:40:42 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1=0xe0000001}}}, 0x80, &(0x7f0000001880), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6000000000000000840000000104000019945cfea64bd31afeccefe5b5fcf34f0793de00b839aaafeb9e389d43108803680293ea4552558846919efc2c8041465fc69f3050f3d3c8fefa5780266fe8b1fd9df339511400000000580000000000000000000000ff7f00001111a406f650"], 0x70}}], 0x2, 0x0) 2018/04/19 08:40:43 executing program 0: 2018/04/19 08:40:43 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1=0xe0000001}}}, 0x80, &(0x7f0000001880), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6000000000000000840000000104000019945cfea64bd31afeccefe5b5fcf34f0793de00b839aaafeb9e389d43108803680293ea4552558846919efc2c8041465fc69f3050f3d3c8fefa5780266fe8b1fd9df339511400000000580000000000000000000000ff7f00001111a406f650"], 0x70}}], 0x2, 0x0) 2018/04/19 08:40:43 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0x8}]}, 0x8) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) sendmmsg(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000002640)='[', 0x1}], 0x1, &(0x7f0000003640)}}], 0x1, 0x0) 2018/04/19 08:40:43 executing program 2: 2018/04/19 08:40:43 executing program 6: 2018/04/19 08:40:43 executing program 7: perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a3c000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x3, 0x5f) sendto$inet(r0, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) 2018/04/19 08:40:43 executing program 3: 2018/04/19 08:40:43 executing program 4: 2018/04/19 08:40:43 executing program 3: 2018/04/19 08:40:43 executing program 6: 2018/04/19 08:40:43 executing program 0: 2018/04/19 08:40:43 executing program 2: 2018/04/19 08:40:43 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1=0xe0000001}}}, 0x80, &(0x7f0000001880), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6000000000000000840000000104000019945cfea64bd31afeccefe5b5fcf34f0793de00b839aaafeb9e389d43108803680293ea4552558846919efc2c8041465fc69f3050f3d3c8fefa5780266fe8b1fd9df339511400000000580000000000000000000000ff7f00001111a406f650"], 0x70}}], 0x2, 0x0) 2018/04/19 08:40:43 executing program 4: 2018/04/19 08:40:43 executing program 7: 2018/04/19 08:40:43 executing program 5: 2018/04/19 08:40:44 executing program 6: 2018/04/19 08:40:44 executing program 3: 2018/04/19 08:40:44 executing program 0: 2018/04/19 08:40:44 executing program 4: 2018/04/19 08:40:44 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1=0xe0000001}}}, 0x80, &(0x7f0000001880), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6000000000000000840000000104000019945cfea64bd31afeccefe5b5fcf34f0793de00b839aaafeb9e389d43108803680293ea4552558846919efc2c8041465fc69f3050f3d3c8fefa5780266fe8b1fd9df339511400000000580000000000000000000000ff7f00001111a406f650"], 0x70}}], 0x2, 0x0) 2018/04/19 08:40:44 executing program 5: 2018/04/19 08:40:44 executing program 2: 2018/04/19 08:40:44 executing program 7: 2018/04/19 08:40:44 executing program 6: 2018/04/19 08:40:44 executing program 3: 2018/04/19 08:40:44 executing program 4: 2018/04/19 08:40:44 executing program 0: 2018/04/19 08:40:44 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1=0xe0000001}}}, 0x80, &(0x7f0000001880), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6000000000000000840000000104000019945cfea64bd31afeccefe5b5fcf34f0793de00b839aaafeb9e389d43108803680293ea4552558846919efc2c8041465fc69f3050f3d3c8fefa5780266fe8b1fd9df339511400000000580000000000000000000000ff7f00001111a406f650"], 0x70}}], 0x2, 0x0) 2018/04/19 08:40:44 executing program 5: 2018/04/19 08:40:44 executing program 2: 2018/04/19 08:40:44 executing program 7: 2018/04/19 08:40:44 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1=0xe0000001}}}, 0x80, &(0x7f0000001880), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6000000000000000840000000104000019945cfea64bd31afeccefe5b5fcf34f0793de00b839aaafeb9e389d43108803680293ea4552558846919efc2c8041465fc69f3050f3d3c8fefa5780266fe8b1fd9df339511400000000580000000000000000000000ff7f00001111a406f650"], 0x70}}], 0x1, 0x0) 2018/04/19 08:40:44 executing program 6: 2018/04/19 08:40:44 executing program 0: 2018/04/19 08:40:44 executing program 5: 2018/04/19 08:40:44 executing program 4: 2018/04/19 08:40:44 executing program 3: 2018/04/19 08:40:44 executing program 5: 2018/04/19 08:40:44 executing program 2: 2018/04/19 08:40:44 executing program 4: 2018/04/19 08:40:44 executing program 6: 2018/04/19 08:40:44 executing program 7: 2018/04/19 08:40:44 executing program 0: 2018/04/19 08:40:44 executing program 3: 2018/04/19 08:40:44 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}], 0x1, 0x0) 2018/04/19 08:40:44 executing program 7: 2018/04/19 08:40:44 executing program 4: 2018/04/19 08:40:44 executing program 3: 2018/04/19 08:40:45 executing program 5: 2018/04/19 08:40:45 executing program 6: 2018/04/19 08:40:45 executing program 0: 2018/04/19 08:40:45 executing program 2: 2018/04/19 08:40:45 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}], 0x1, 0x0) 2018/04/19 08:40:45 executing program 3: 2018/04/19 08:40:45 executing program 4: 2018/04/19 08:40:45 executing program 7: 2018/04/19 08:40:45 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000100), 0x361, 0x0) 2018/04/19 08:40:45 executing program 5: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000100)) 2018/04/19 08:40:45 executing program 0: 2018/04/19 08:40:45 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000723f88)={0x2, 0x70, 0xc35, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000301000)={0x2, 0x0, @rand_addr=0x80000001}, 0x51) shutdown(r0, 0x1) 2018/04/19 08:40:45 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000100), 0x361, 0x0) 2018/04/19 08:40:45 executing program 7: 2018/04/19 08:40:45 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}], 0x1, 0x0) 2018/04/19 08:40:45 executing program 6: 2018/04/19 08:40:45 executing program 4: 2018/04/19 08:40:45 executing program 0: 2018/04/19 08:40:45 executing program 5: 2018/04/19 08:40:45 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1=0xe0000001}}}, 0x80, &(0x7f0000001880), 0x0, &(0x7f0000000280)=ANY=[]}}], 0x2, 0x0) 2018/04/19 08:40:45 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000a83000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa}}}, 0x108) 2018/04/19 08:40:45 executing program 5: perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000680)) 2018/04/19 08:40:45 executing program 6: mkdir(&(0x7f0000c4e000)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fadvise64(r0, 0x0, 0x0, 0x2) 2018/04/19 08:40:45 executing program 7: socket$inet(0x2, 0xa, 0x6) syz_emit_ethernet(0xe, &(0x7f0000000280)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@generic={0x600}}}, &(0x7f0000000000)) 2018/04/19 08:40:45 executing program 4: r0 = open(&(0x7f0000000240)='./file0\x00', 0x14104a, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0), 0x8) write$evdev(r0, &(0x7f0000000040)=[{}], 0x18) sendfile(r0, r0, &(0x7f0000000140), 0x100020001) lseek(r0, 0x0, 0x4) [ 70.733990] syz-executor7 uses obsolete (PF_INET,SOCK_PACKET) 2018/04/19 08:40:45 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1=0xe0000001}}}, 0x80, &(0x7f0000001880), 0x0, &(0x7f0000000280)=ANY=[]}}], 0x2, 0x0) 2018/04/19 08:40:45 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000100), 0x361, 0x0) [ 71.637512] ================================================================== [ 71.645189] WARNING: memcpy-param-overlap in generic_perform_write+0x4c6/0x990 [ 71.652622] __msan_memcpy(ffff8801cd2e0018, ffff8801cd2e0000, 4072) [ 71.659098] CPU: 1 PID: 5965 Comm: syz-executor4 Not tainted 4.16.0+ #84 [ 71.665938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 71.675295] Call Trace: [ 71.677914] dump_stack+0x185/0x1d0 [ 71.681588] __msan_memcpy+0x90/0x1f0 [ 71.685410] iov_iter_copy_from_user_atomic+0xb04/0x17d0 [ 71.690864] ================================================================== [ 71.698206] BUG: KMSAN: uninit-value in kernel_text_address+0x248/0x3a0 [ 71.704933] CPU: 1 PID: 5965 Comm: syz-executor4 Not tainted 4.16.0+ #84 [ 71.711746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 71.721074] Call Trace: [ 71.723640] dump_stack+0x14a/0x1d0 [ 71.727246] ? kernel_text_address+0x248/0x3a0 [ 71.731805] kmsan_report+0x142/0x240 [ 71.735582] __msan_warning_32+0x6c/0xb0 [ 71.739620] kernel_text_address+0x248/0x3a0 [ 71.744012] __kernel_text_address+0x34/0xe0 [ 71.748398] show_trace_log_lvl+0x954/0x1030 [ 71.752783] ? generic_perform_write+0x4c6/0x990 [ 71.757518] show_stack+0xfc/0x150 [ 71.761039] ? print_worker_info+0x1b0/0x660 [ 71.765422] dump_stack+0x185/0x1d0 [ 71.769026] __msan_memcpy+0x90/0x1f0 [ 71.772808] iov_iter_copy_from_user_atomic+0xb04/0x17d0 [ 71.778248] generic_perform_write+0x4c6/0x990 [ 71.782811] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 71.788174] __generic_file_write_iter+0x43b/0x990 [ 71.793101] ? rwsem_down_write_failed+0x2c/0x30 [ 71.797841] generic_file_write_iter+0x814/0xbf0 [ 71.802586] ? __generic_file_write_iter+0x990/0x990 [ 71.807668] do_iter_readv_writev+0x7bb/0x970 [ 71.812144] ? __generic_file_write_iter+0x990/0x990 [ 71.817223] do_iter_write+0x30d/0xd40 [ 71.821086] ? kmsan_set_origin_inline+0x6b/0x120 [ 71.825912] ? __generic_file_write_iter+0x990/0x990 [ 71.831003] vfs_iter_write+0x118/0x180 [ 71.834990] iter_file_splice_write+0xbc3/0x1710 [ 71.839753] ? splice_from_pipe+0x2c0/0x2c0 [ 71.844050] ? splice_from_pipe+0x2c0/0x2c0 [ 71.848347] direct_splice_actor+0x19b/0x200 [ 71.852732] splice_direct_to_actor+0x764/0x1040 [ 71.857463] ? do_splice_direct+0x540/0x540 [ 71.861762] ? security_file_permission+0x28f/0x4b0 [ 71.866757] ? rw_verify_area+0x35e/0x580 [ 71.870883] do_splice_direct+0x335/0x540 [ 71.875010] do_sendfile+0x1067/0x1e40 [ 71.878883] SYSC_sendfile64+0x1b3/0x300 [ 71.882933] SyS_sendfile64+0x64/0x90 [ 71.886711] do_syscall_64+0x309/0x430 [ 71.890586] ? SYSC_sendfile+0x320/0x320 [ 71.894648] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 71.899847] RIP: 0033:0x455329 [ 71.903018] RSP: 002b:00007f0e79ed0c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 71.910704] RAX: ffffffffffffffda RBX: 00007f0e79ed16d4 RCX: 0000000000455329 [ 71.917950] RDX: 0000000020000140 RSI: 0000000000000014 RDI: 0000000000000014 [ 71.925198] RBP: 000000000072bf58 R08: 0000000000000000 R09: 0000000000000000 [ 71.932446] R10: 0000000100020001 R11: 0000000000000246 R12: 00000000ffffffff [ 71.939692] R13: 00000000000004c6 R14: 00000000006fa330 R15: 0000000000000001 [ 71.946941] [ 71.948545] Local variable description: ----flags.i.i.i.i.i@get_page_from_freelist [ 71.956222] Variable was created at: [ 71.959916] get_page_from_freelist+0x15d/0xb600 [ 71.964648] __alloc_pages_nodemask+0x789/0x5dc0 [ 71.969372] ================================================================== [ 71.976702] Disabling lock debugging due to kernel taint [ 71.982124] Kernel panic - not syncing: panic_on_warn set ... [ 71.982124] [ 71.989463] CPU: 1 PID: 5965 Comm: syz-executor4 Tainted: G B 4.16.0+ #84 [ 71.997575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 72.006904] Call Trace: [ 72.009475] dump_stack+0x14a/0x1d0 [ 72.013082] panic+0x39d/0x940 [ 72.016276] ? kernel_text_address+0x248/0x3a0 [ 72.020835] kmsan_report+0x238/0x240 [ 72.024617] __msan_warning_32+0x6c/0xb0 [ 72.028662] kernel_text_address+0x248/0x3a0 [ 72.033060] __kernel_text_address+0x34/0xe0 [ 72.037451] show_trace_log_lvl+0x954/0x1030 [ 72.041839] ? generic_perform_write+0x4c6/0x990 [ 72.046578] show_stack+0xfc/0x150 [ 72.050097] ? print_worker_info+0x1b0/0x660 [ 72.054484] dump_stack+0x185/0x1d0 [ 72.058094] __msan_memcpy+0x90/0x1f0 [ 72.061877] iov_iter_copy_from_user_atomic+0xb04/0x17d0 [ 72.067315] generic_perform_write+0x4c6/0x990 [ 72.071876] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 72.077225] __generic_file_write_iter+0x43b/0x990 [ 72.082131] ? rwsem_down_write_failed+0x2c/0x30 [ 72.086863] generic_file_write_iter+0x814/0xbf0 [ 72.091596] ? __generic_file_write_iter+0x990/0x990 [ 72.096672] do_iter_readv_writev+0x7bb/0x970 [ 72.101149] ? __generic_file_write_iter+0x990/0x990 [ 72.106226] do_iter_write+0x30d/0xd40 [ 72.110089] ? kmsan_set_origin_inline+0x6b/0x120 [ 72.114911] ? __generic_file_write_iter+0x990/0x990 [ 72.119990] vfs_iter_write+0x118/0x180 [ 72.123944] iter_file_splice_write+0xbc3/0x1710 [ 72.128684] ? splice_from_pipe+0x2c0/0x2c0 [ 72.132982] ? splice_from_pipe+0x2c0/0x2c0 [ 72.137284] direct_splice_actor+0x19b/0x200 [ 72.141671] splice_direct_to_actor+0x764/0x1040 [ 72.146718] ? do_splice_direct+0x540/0x540 [ 72.151019] ? security_file_permission+0x28f/0x4b0 [ 72.156012] ? rw_verify_area+0x35e/0x580 [ 72.160148] do_splice_direct+0x335/0x540 [ 72.164316] do_sendfile+0x1067/0x1e40 [ 72.168218] SYSC_sendfile64+0x1b3/0x300 [ 72.172269] SyS_sendfile64+0x64/0x90 [ 72.176059] do_syscall_64+0x309/0x430 [ 72.179939] ? SYSC_sendfile+0x320/0x320 [ 72.183991] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 72.189175] RIP: 0033:0x455329 [ 72.192369] RSP: 002b:00007f0e79ed0c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 72.200070] RAX: ffffffffffffffda RBX: 00007f0e79ed16d4 RCX: 0000000000455329 [ 72.207326] RDX: 0000000020000140 RSI: 0000000000000014 RDI: 0000000000000014 [ 72.214571] RBP: 000000000072bf58 R08: 0000000000000000 R09: 0000000000000000 [ 72.221818] R10: 0000000100020001 R11: 0000000000000246 R12: 00000000ffffffff [ 72.229068] R13: 00000000000004c6 R14: 00000000006fa330 R15: 0000000000000001 [ 72.236830] Dumping ftrace buffer: [ 72.240353] (ftrace buffer empty) [ 72.244046] Kernel Offset: disabled [ 72.247648] Rebooting in 86400 seconds..