[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 29.630758] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 35.085281] random: sshd: uninitialized urandom read (32 bytes read) [ 35.423745] random: sshd: uninitialized urandom read (32 bytes read) [ 36.778137] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.8' (ECDSA) to the list of known hosts. [ 42.369882] random: sshd: uninitialized urandom read (32 bytes read) 2018/06/13 03:26:31 fuzzer started [ 43.949281] random: cc1: uninitialized urandom read (8 bytes read) 2018/06/13 03:26:34 dialing manager at 10.128.0.26:37025 2018/06/13 03:26:40 syscalls: 1643 2018/06/13 03:26:40 code coverage: enabled 2018/06/13 03:26:40 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: errno 524 2018/06/13 03:26:40 setuid sandbox: enabled 2018/06/13 03:26:40 namespace sandbox: enabled 2018/06/13 03:26:40 fault injection: enabled 2018/06/13 03:26:40 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/06/13 03:26:40 net packed injection: enabled 03:26:47 executing program 0: 03:26:47 executing program 2: 03:26:47 executing program 7: 03:26:47 executing program 1: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x2000)=nil, 0x2000, 0xfffffffffffffffc, 0x4011, r0, 0x0) 03:26:47 executing program 4: syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/mnt\x00') 03:26:47 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broxte\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', "000000005426817c00", @link_local={0x1, 0x80, 0xc2}, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0xb0, 0xb0, 0xe0, [@quota={'quota\x00', 0x18}]}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0x4}}}}]}]}, 0x1e8) 03:26:47 executing program 6: r0 = socket$inet6(0xa, 0x3, 0x800000000000003a) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x3}, 0x5c) 03:26:47 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c2b4599edb0ff5aeb649a7eebd3ce81e4b4db4efbe7400c828bbf7fde7c95ba8c87d552a8e949d9ade636972432a607b46a38ce8243769aabe6439df5f1f1e4b", "173a5599125af66a28fbd34d43f8167564f168ccb355b23ac9c0fab9516a6766f3ab974c81089b8661ee02253d0dfd8bff4d87a472f6db4d5e52d863a60034af", "d70b69b4d36b0eff9cceed762f72fb5198d349f93dcb62a236d0e645f5d787dc"}) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2b3, 0x8, 0x0, 0x17, 0xd, 0x4, "45b4e34f034f61ba88a52969022963d268c0dcf12fab42f0a37b048387b8b1f73429b1eadc5a3c30fac0c9e8b1382fe2f143c956d40727fbccc0c5a9237b6b63", "bbf93f17e997c111c959308819ff1bfdbee7454ac7c5b108d6f376f8ebcf45789a8e6906e986482354bae266b0e2346df815686de90975a367aada9e30d491f4", "4a32939456655f8a05d467a8c93d6f508457ef83955cfc1dcfa65561f4fb85a7", [0x9b03, 0xc159]}) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x1, 0x2120c0) [ 58.876100] IPVS: ftp: loaded support on port[0] = 21 [ 58.913661] IPVS: ftp: loaded support on port[0] = 21 [ 58.933208] IPVS: ftp: loaded support on port[0] = 21 [ 58.972864] IPVS: ftp: loaded support on port[0] = 21 [ 58.993526] IPVS: ftp: loaded support on port[0] = 21 [ 58.996515] IPVS: ftp: loaded support on port[0] = 21 [ 59.031801] IPVS: ftp: loaded support on port[0] = 21 [ 59.037788] IPVS: ftp: loaded support on port[0] = 21 [ 60.824014] ip (4645) used greatest stack depth: 54424 bytes left [ 61.785531] ip (4719) used greatest stack depth: 54328 bytes left [ 62.290763] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.297252] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.331916] device bridge_slave_0 entered promiscuous mode [ 62.355305] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.361802] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.382701] device bridge_slave_0 entered promiscuous mode [ 62.415929] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.422915] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.450520] device bridge_slave_0 entered promiscuous mode [ 62.469977] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.476499] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.502534] device bridge_slave_0 entered promiscuous mode [ 62.517947] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.524498] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.550698] device bridge_slave_0 entered promiscuous mode [ 62.561676] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.568130] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.578766] device bridge_slave_0 entered promiscuous mode [ 62.592490] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.598983] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.607738] device bridge_slave_1 entered promiscuous mode [ 62.629347] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.635768] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.664283] device bridge_slave_0 entered promiscuous mode [ 62.680848] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.687430] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.710979] device bridge_slave_0 entered promiscuous mode [ 62.725574] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.732007] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.739668] device bridge_slave_1 entered promiscuous mode [ 62.745978] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.752650] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.768450] device bridge_slave_1 entered promiscuous mode [ 62.790325] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.796760] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.820767] device bridge_slave_1 entered promiscuous mode [ 62.829855] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.836309] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.851487] device bridge_slave_1 entered promiscuous mode [ 62.866665] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.873121] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.883125] device bridge_slave_1 entered promiscuous mode [ 62.891351] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 62.906400] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 62.914828] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 62.922113] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.928544] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.965123] device bridge_slave_1 entered promiscuous mode [ 62.988444] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.994892] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.025271] device bridge_slave_1 entered promiscuous mode [ 63.056405] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 63.064857] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 63.074512] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 63.085493] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 63.093575] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 63.120724] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 63.210412] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 63.227623] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 63.308378] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 63.319811] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 63.367945] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 63.404500] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 63.428927] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 63.642247] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 63.694364] ip (4854) used greatest stack depth: 54056 bytes left [ 63.722600] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 63.763241] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 63.860660] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 63.939960] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 63.961915] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 63.972705] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 63.996025] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 64.015336] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 64.045939] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 64.095708] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 64.106006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.132230] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 64.183075] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 64.193718] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 64.201775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.217393] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 64.237085] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 64.245294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.276946] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 64.326937] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 64.410948] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 64.437254] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 64.444266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.459970] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 64.466975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.489271] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 64.496290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.516863] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 64.523862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.548009] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 64.555662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.598538] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 64.605506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.647337] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 64.654338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.674649] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 64.682659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.724732] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 64.739164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.774981] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 64.781967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.887418] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 64.894404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.984443] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 65.010845] team0: Port device team_slave_0 added [ 65.182899] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 65.205247] team0: Port device team_slave_0 added [ 65.228477] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 65.256719] team0: Port device team_slave_1 added [ 65.265644] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 65.276073] team0: Port device team_slave_0 added [ 65.297718] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 65.319138] team0: Port device team_slave_0 added [ 65.329974] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 65.351703] team0: Port device team_slave_0 added [ 65.378756] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 65.405928] team0: Port device team_slave_0 added [ 65.420750] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 65.431786] team0: Port device team_slave_1 added [ 65.468190] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 65.475128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.494734] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.519959] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 65.533820] team0: Port device team_slave_1 added [ 65.555158] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 65.570394] team0: Port device team_slave_0 added [ 65.576593] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 65.596005] team0: Port device team_slave_1 added [ 65.618167] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 65.628222] team0: Port device team_slave_1 added [ 65.635223] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 65.652636] team0: Port device team_slave_0 added [ 65.671255] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 65.679691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.697799] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.716482] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 65.725195] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 65.737183] team0: Port device team_slave_1 added [ 65.764135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.774970] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.801295] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 65.812077] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 65.830886] team0: Port device team_slave_1 added [ 65.847190] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 65.854252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.865315] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.888829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.907991] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.926057] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 65.933672] team0: Port device team_slave_1 added [ 65.939453] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 65.946766] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 65.956181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.970344] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.983335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.998876] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.034197] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 66.045217] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 66.053455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.068968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.102639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.118005] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.136120] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 66.144089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.152340] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.165249] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 66.179842] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 66.188108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.214613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.236913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.264923] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.288336] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 66.301555] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 66.309777] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 66.320958] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 66.330266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.350914] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.392794] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.425241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.447612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.456872] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.465169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.474397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.492218] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 66.514412] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 66.523623] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 66.532761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.542351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.565234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.574865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.582945] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.592571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.604677] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 66.612180] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 66.620586] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 66.630764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.666161] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.693631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.708235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.717402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.726134] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.734241] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 66.742313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.751944] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.779457] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 66.788265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.804166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.814778] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 66.824404] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 66.834712] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 66.842642] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 66.869991] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 66.877540] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.905203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.942073] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.976836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.003534] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.021799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.035601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.043973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.051997] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.060082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.084151] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 67.099842] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 67.109485] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.132143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.150831] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.168578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.194406] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 67.202642] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.219384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.607230] ================================================================== [ 68.614653] BUG: KMSAN: uninit-value in get_page_from_freelist+0x5f24/0xb740 [ 68.621841] CPU: 0 PID: 4493 Comm: syz-executor2 Not tainted 4.17.0+ #6 [ 68.628586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 68.637929] Call Trace: [ 68.640516] dump_stack+0x185/0x1d0 [ 68.644142] kmsan_report+0x188/0x2a0 [ 68.647946] __msan_warning_32+0x70/0xc0 [ 68.652007] get_page_from_freelist+0x5f24/0xb740 [ 68.656865] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 68.662232] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 68.667595] ? __module_address+0x6a/0x600 [ 68.671835] ? __alloc_pages_nodemask+0x600/0x5cc0 [ 68.676771] __alloc_pages_nodemask+0x792/0x5cc0 [ 68.681526] ? __is_insn_slot_addr+0x198/0x1c0 [ 68.686196] ? kernel_text_address+0x34d/0x3a0 [ 68.690783] ? __kernel_text_address+0x34/0xe0 [ 68.695371] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 68.697223] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.700814] ? __save_stack_trace+0x90d/0xb00 [ 68.700835] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 68.700861] alloc_pages_current+0x6b1/0x970 [ 68.707232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.711647] get_zeroed_page+0x3f/0xd0 [ 68.711658] __pud_alloc+0xab/0x440 [ 68.711671] ? copy_process+0x6d9b/0x9be0 [ 68.711684] copy_page_range+0x3c1a/0x3f50 [ 68.711708] ? _cond_resched+0x3c/0xd0 [ 68.717279] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.721431] ? __rb_insert_augmented+0xd5a/0x13f0 [ 68.721449] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 68.721471] ? init_admin_reserve+0x160/0x160 [ 68.728060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.731813] ? __vma_link_rb+0xbd3/0xc90 [ 68.731831] copy_process+0x6d9b/0x9be0 [ 68.731863] _do_fork+0x353/0xf60 [ 68.739374] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 68.739605] __x64_sys_clone+0x15e/0x1b0 [ 68.744057] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.747697] ? __ia32_sys_vfork+0x70/0x70 [ 68.747708] do_syscall_64+0x15b/0x230 [ 68.747735] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 68.816625] RIP: 0033:0x41f949 [ 68.819804] RSP: 002b:0000000000a3fad0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 68.827506] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000041f949 [ 68.834772] RDX: 0000000000a3fadc RSI: 0000000000000000 RDI: 0000000000100011 [ 68.842580] RBP: 0000000000a3fc80 R08: 0000000000a44a60 R09: 000000000000002a [ 68.849846] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000a3fe78 [ 68.857106] R13: 0000000000a3fe28 R14: 0000000000000000 R15: 0000000000000000 [ 68.864381] [ 68.866001] Uninit was stored to memory at: [ 68.870339] kmsan_internal_chain_origin+0x12b/0x210 [ 68.875438] __msan_chain_origin+0x69/0xc0 [ 68.879671] free_unref_page_commit+0x4bc/0x4d0 [ 68.884342] free_pages+0x290/0x320 [ 68.887960] tlb_finish_mmu+0x3f7/0x5c0 [ 68.891927] exit_mmap+0x539/0x980 [ 68.895463] __mmput+0x158/0x600 [ 68.898820] mmput+0xab/0xf0 [ 68.901835] exit_mm+0x6ed/0x7a0 [ 68.905199] do_exit+0xc12/0x3930 [ 68.908650] do_group_exit+0x1a0/0x360 [ 68.912538] __do_sys_exit_group+0x21/0x30 [ 68.916771] __se_sys_exit_group+0x14/0x20 [ 68.921004] __x64_sys_exit_group+0x4c/0x50 [ 68.925322] do_syscall_64+0x15b/0x230 [ 68.929204] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 68.934380] Uninit was stored to memory at: [ 68.938699] kmsan_internal_chain_origin+0x12b/0x210 [ 68.943887] __msan_chain_origin+0x69/0xc0 [ 68.948119] unmap_page_range+0xeb4/0x3be0 [ 68.952351] unmap_single_vma+0x445/0x5e0 [ 68.956494] unmap_vmas+0x1f4/0x360 [ 68.960117] exit_mmap+0x4d7/0x980 [ 68.963658] __mmput+0x158/0x600 [ 68.967020] mmput+0xab/0xf0 [ 68.970037] exit_mm+0x6ed/0x7a0 [ 68.973394] do_exit+0xc12/0x3930 [ 68.976839] do_group_exit+0x1a0/0x360 [ 68.980720] __do_sys_exit_group+0x21/0x30 [ 68.984953] __se_sys_exit_group+0x14/0x20 [ 68.989188] __x64_sys_exit_group+0x4c/0x50 [ 68.993505] do_syscall_64+0x15b/0x230 [ 68.997487] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 69.002667] Uninit was stored to memory at: [ 69.006992] kmsan_internal_chain_origin+0x12b/0x210 [ 69.012087] __msan_chain_origin+0x69/0xc0 [ 69.016318] free_unref_page_commit+0x4bc/0x4d0 [ 69.020980] free_pages+0x290/0x320 [ 69.024601] tlb_finish_mmu+0x3f7/0x5c0 [ 69.028572] exit_mmap+0x539/0x980 [ 69.032108] __mmput+0x158/0x600 [ 69.035472] mmput+0xab/0xf0 [ 69.038490] exit_mm+0x6ed/0x7a0 [ 69.042117] do_exit+0xc12/0x3930 [ 69.045568] do_group_exit+0x1a0/0x360 [ 69.049451] __do_sys_exit_group+0x21/0x30 [ 69.053678] __se_sys_exit_group+0x14/0x20 [ 69.057907] __x64_sys_exit_group+0x4c/0x50 [ 69.062222] do_syscall_64+0x15b/0x230 [ 69.066108] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 69.071287] Local variable description: ----tlb@exit_mmap [ 69.076826] Variable was created at: [ 69.080534] exit_mmap+0x47/0x980 [ 69.083990] __mmput+0x158/0x600 [ 69.087342] ================================================================== [ 69.094688] Disabling lock debugging due to kernel taint [ 69.100126] Kernel panic - not syncing: panic_on_warn set ... [ 69.100126] [ 69.107491] CPU: 0 PID: 4493 Comm: syz-executor2 Tainted: G B 4.17.0+ #6 [ 69.115627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.124974] Call Trace: [ 69.127563] dump_stack+0x185/0x1d0 [ 69.131187] panic+0x3d0/0x990 [ 69.134384] kmsan_report+0x29e/0x2a0 [ 69.138178] __msan_warning_32+0x70/0xc0 [ 69.142232] get_page_from_freelist+0x5f24/0xb740 [ 69.147088] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 69.152454] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 69.157819] ? __module_address+0x6a/0x600 [ 69.162060] ? __alloc_pages_nodemask+0x600/0x5cc0 [ 69.167000] __alloc_pages_nodemask+0x792/0x5cc0 [ 69.171784] ? __is_insn_slot_addr+0x198/0x1c0 [ 69.176365] ? kernel_text_address+0x34d/0x3a0 [ 69.180943] ? __kernel_text_address+0x34/0xe0 [ 69.185522] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 69.190976] ? __save_stack_trace+0x90d/0xb00 [ 69.195478] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 69.201024] alloc_pages_current+0x6b1/0x970 [ 69.205434] get_zeroed_page+0x3f/0xd0 [ 69.209326] __pud_alloc+0xab/0x440 [ 69.212949] ? copy_process+0x6d9b/0x9be0 [ 69.217090] copy_page_range+0x3c1a/0x3f50 [ 69.221325] ? _cond_resched+0x3c/0xd0 [ 69.225206] ? __rb_insert_augmented+0xd5a/0x13f0 [ 69.230051] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 69.235424] ? init_admin_reserve+0x160/0x160 [ 69.239924] ? __vma_link_rb+0xbd3/0xc90 [ 69.243990] copy_process+0x6d9b/0x9be0 [ 69.247979] _do_fork+0x353/0xf60 [ 69.251439] __x64_sys_clone+0x15e/0x1b0 [ 69.255496] ? __ia32_sys_vfork+0x70/0x70 [ 69.259637] do_syscall_64+0x15b/0x230 [ 69.263523] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 69.268705] RIP: 0033:0x41f949 [ 69.271890] RSP: 002b:0000000000a3fad0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 69.279596] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000041f949 [ 69.286860] RDX: 0000000000a3fadc RSI: 0000000000000000 RDI: 0000000000100011 [ 69.294124] RBP: 0000000000a3fc80 R08: 0000000000a44a60 R09: 000000000000002a [ 69.301384] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000a3fe78 [ 69.308647] R13: 0000000000a3fe28 R14: 0000000000000000 R15: 0000000000000000 [ 69.316365] Dumping ftrace buffer: [ 69.319893] (ftrace buffer empty) [ 69.323579] Kernel Offset: disabled [ 69.327180] Rebooting in 86400 seconds..