[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 18.922112] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 21.352306] random: sshd: uninitialized urandom read (32 bytes read) [ 21.657668] random: sshd: uninitialized urandom read (32 bytes read) [ 22.596825] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.39' (ECDSA) to the list of known hosts. [ 28.131308] random: sshd: uninitialized urandom read (32 bytes read) 2018/06/09 23:55:35 fuzzer started [ 29.415370] random: cc1: uninitialized urandom read (8 bytes read) 2018/06/09 23:55:37 dialing manager at 10.128.0.26:41913 [ 61.090336] can: request_module (can-proto-0) failed. [ 61.099507] can: request_module (can-proto-0) failed. 2018/06/09 23:56:10 kcov=true, comps=true 23:56:18 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/249, 0xf9}], 0x10000000000000f0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 23:56:18 executing program 2: r0 = syz_open_dev$midi(&(0x7f0000001000)='/dev/midi#\x00', 0x200, 0x81) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write(r0, &(0x7f0000003000)="4d98ae79a7eb359cd70a720902c4054afee11afe085dd6dd4194cbf6da1529e33af2a03a73b83c4aab7226a03d1b54144b8571db888bad34cb44a3ffaa2bf3f5215a33a899a04c2a4214edeaf61d13c8def3fe1670ceb4aaec49aea79f226047364cdadae2b0b688410e68bd363a32ccfaca8dbbe880f99376cbbe0adeaae1bd7725e7bf43155f7be87d61d681d9b475bc670e930a3899c24b470b0f1ebe0b4b2dc20a59916101cfb257ad28972d3a21ea9cae3432431d33ea1d23f6", 0xbc) 23:56:18 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000300), 0x4) 23:56:18 executing program 7: nanosleep(&(0x7f00000003c0)={0x77359400}, &(0x7f00000001c0)) nanosleep(&(0x7f0000000380)={0x0, 0x1c9c380}, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000200000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) 23:56:18 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8f4b, &(0x7f0000000080)="295ee1311f16f47767107040879105abbea80fb6fccfa2a9b5b379a27172fcae8d4c1d826c4a20b78f2ea94c978583017f52a9cc18362b6be3dbc70095854746d9d3d3fa144231a094ef5b7e1b946e9c237e0149a42d551dc17f3860e0b3f0f0fccd9ce32029c66193fb311cd7e4b9f2ccd674bdfebfabf14b5ce0385b13166581df3007a08a36e449cfd9ec460d41e65b7ebfb3183d13db4eb8ad936897b689230221") creat(&(0x7f0000000700)='./bus\x00', 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r1, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/2, 0x2000, 0x800}, 0x18) 23:56:18 executing program 3: r0 = memfd_create(&(0x7f000003affa)='posix_acl_access{Y\x00', 0x0) lseek(r0, 0x7ffffffffffffffb, 0x0) read$eventfd(r0, &(0x7f0000000200), 0x8) 23:56:18 executing program 5: r0 = getpgid(0x0) sched_setaffinity(r0, 0x1cd, &(0x7f0000da3000)=0x2) syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000cd8ff4)) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000007000)={0xffffffffc0000001}) epoll_wait(r4, &(0x7f0000000000)=[{}], 0x10a, 0x0) close(r3) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 23:56:18 executing program 6: r0 = add_key$keyring(&(0x7f00000005c0)='keyring\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x800, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r3 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000b00)={0x73, 0x79, 0x7a}, &(0x7f00000000c0)="7f", 0x1, r2) r4 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x23e, r0) keyctl$dh_compute(0x17, &(0x7f0000000340)={r3, r4, r4}, &(0x7f0000000600)=""/132, 0xffffffffffffff98, 0x0) [ 71.020762] random: crng init done [ 71.211540] IPVS: ftp: loaded support on port[0] = 21 [ 71.220678] IPVS: ftp: loaded support on port[0] = 21 [ 71.273859] IPVS: ftp: loaded support on port[0] = 21 [ 71.284876] IPVS: ftp: loaded support on port[0] = 21 [ 71.287826] IPVS: ftp: loaded support on port[0] = 21 [ 71.351976] IPVS: ftp: loaded support on port[0] = 21 [ 71.355851] IPVS: ftp: loaded support on port[0] = 21 [ 71.375672] IPVS: ftp: loaded support on port[0] = 21 [ 73.351629] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.358163] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.384503] device bridge_slave_0 entered promiscuous mode [ 73.397009] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.403437] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.411271] device bridge_slave_0 entered promiscuous mode [ 73.451258] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.457675] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.485076] device bridge_slave_0 entered promiscuous mode [ 73.507769] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.514181] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.530619] device bridge_slave_0 entered promiscuous mode [ 73.539384] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.545769] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.553902] device bridge_slave_1 entered promiscuous mode [ 73.563574] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.569955] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.580164] device bridge_slave_1 entered promiscuous mode [ 73.589786] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.596167] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.603699] device bridge_slave_0 entered promiscuous mode [ 73.617880] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.624272] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.642147] device bridge_slave_0 entered promiscuous mode [ 73.659166] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 73.666392] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.672861] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.681687] device bridge_slave_0 entered promiscuous mode [ 73.690831] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.697199] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.717141] device bridge_slave_1 entered promiscuous mode [ 73.734392] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.740789] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.749813] device bridge_slave_1 entered promiscuous mode [ 73.757598] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 73.765711] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.772206] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.795291] device bridge_slave_0 entered promiscuous mode [ 73.811785] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.818152] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.825425] device bridge_slave_1 entered promiscuous mode [ 73.832780] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.839156] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.851428] device bridge_slave_1 entered promiscuous mode [ 73.862626] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 73.871159] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 73.879617] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 73.890368] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.896749] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.924904] device bridge_slave_1 entered promiscuous mode [ 73.935810] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 73.942875] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.949300] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.971648] device bridge_slave_1 entered promiscuous mode [ 73.985774] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 73.993927] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 74.010370] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 74.028105] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 74.062448] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 74.097659] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 74.110618] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 74.159389] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 74.204885] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 74.243701] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 74.272466] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 74.294425] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 74.392641] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 74.401832] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 74.413006] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 74.444090] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 74.462769] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 74.565872] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 74.581725] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 74.598850] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 74.613409] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 74.646231] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 74.684449] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 74.739088] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 74.795301] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 74.847393] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 74.863507] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 74.870470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.914807] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 74.921900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.004246] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 75.011160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.036898] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 75.046077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.084635] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 75.101849] team0: Port device team_slave_0 added [ 75.122936] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 75.129801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.151006] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 75.164675] team0: Port device team_slave_0 added [ 75.189304] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 75.196405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.211347] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 75.242415] team0: Port device team_slave_0 added [ 75.249745] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 75.264825] team0: Port device team_slave_0 added [ 75.273005] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 75.282475] team0: Port device team_slave_1 added [ 75.305842] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 75.328999] team0: Port device team_slave_1 added [ 75.349438] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 75.367400] team0: Port device team_slave_1 added [ 75.385705] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 75.399412] team0: Port device team_slave_0 added [ 75.407576] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 75.419607] team0: Port device team_slave_1 added [ 75.429072] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 75.438469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.452297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.465391] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 75.472218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.480507] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.496714] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 75.512777] team0: Port device team_slave_1 added [ 75.518166] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 75.528443] team0: Port device team_slave_0 added [ 75.563915] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.598071] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.628770] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.658645] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.673541] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 75.681949] team0: Port device team_slave_0 added [ 75.689362] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 75.699805] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 75.716497] team0: Port device team_slave_1 added [ 75.728393] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.744464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.765342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.774220] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.785774] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 75.793259] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.802942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.815877] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 75.823741] team0: Port device team_slave_0 added [ 75.834265] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 75.841736] team0: Port device team_slave_1 added [ 75.852980] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 75.862805] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 75.871840] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.887326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.911505] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.933351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.944953] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.952663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.960724] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 75.967680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.976005] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.984202] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 75.993958] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 76.001698] team0: Port device team_slave_1 added [ 76.009204] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 76.017934] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 76.030078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.045197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.072283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.095612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.108918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.116557] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.125300] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 76.134545] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 76.141686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.149706] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.157413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.165755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.175600] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 76.182857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.192795] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.211802] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 76.221082] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 76.228450] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 76.242326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.252658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.297854] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.330202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.338312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.345974] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.355388] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 76.362827] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.371228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.381730] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 76.397814] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 76.407151] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 76.417104] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 76.435215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.486107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.517248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.529126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.536861] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.544643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.552304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.559982] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.578859] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 76.588742] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 76.602137] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.633674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.655573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.667468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.700860] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 76.711402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.720314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.384716] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.391658] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.398625] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.405010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.431008] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 77.449276] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.455649] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.462346] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.468726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.491769] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 77.705055] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.711474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.718178] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.724571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.741749] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 77.760872] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.767294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.773971] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.780360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.838660] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 77.880106] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.893951] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.918078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.945647] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.060643] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.067077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.073768] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.080146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.092507] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 78.107798] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.114199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.120863] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.127235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.135052] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 78.185546] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.191952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.198601] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.204958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.230400] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 78.288491] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.294893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.301547] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.307929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.336427] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 78.944514] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.964840] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.992099] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.008231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.520615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.541740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.793303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.893447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.949897] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 83.082361] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 83.095997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.112454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.144715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.355737] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 83.378315] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 83.403808] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 83.411373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.425530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.478111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.562715] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 83.571755] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 83.606963] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 83.623973] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 83.630168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.642087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.866938] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 83.874101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.888214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.905671] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 83.923374] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.947454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.963586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.998930] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 84.005197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.020786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.036360] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 84.042725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.060561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.080373] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 84.107365] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 84.119227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.152609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.220186] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.412817] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.426372] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.475485] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.556750] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.589326] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 84.606152] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.620553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.635901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.059198] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.890512] ================================================================== [ 86.898040] BUG: KASAN: null-ptr-deref in xdp_umem_unaccount_pages.isra.5+0x3d/0x80 [ 86.905842] Write of size 8 at addr 0000000000000060 by task syz-executor4/6580 [ 86.913281] [ 86.914915] CPU: 1 PID: 6580 Comm: syz-executor4 Not tainted 4.17.0+ #93 [ 86.921748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 86.931101] Call Trace: [ 86.933704] dump_stack+0x1b9/0x294 [ 86.937347] ? dump_stack_print_info.cold.2+0x52/0x52 [ 86.942548] ? kasan_check_write+0x14/0x20 [ 86.946793] ? do_raw_spin_lock+0xc1/0x200 [ 86.951037] ? vprintk_func+0x81/0xe7 [ 86.954848] ? xdp_umem_unaccount_pages.isra.5+0x3d/0x80 [ 86.960308] kasan_report.cold.7+0x6d/0x2fe [ 86.964638] check_memory_region+0x13e/0x1b0 [ 86.969053] kasan_check_write+0x14/0x20 [ 86.973120] xdp_umem_unaccount_pages.isra.5+0x3d/0x80 [ 86.978403] xdp_umem_create+0xd6c/0x10f0 [ 86.982558] ? xdp_put_umem+0x240/0x240 [ 86.986536] ? check_same_owner+0x320/0x320 [ 86.990855] ? get_unmapped_area+0x292/0x3b0 [ 86.995269] ? __might_sleep+0x95/0x190 [ 86.999258] xsk_setsockopt+0x443/0x550 [ 87.003243] ? xsk_init_queue+0xf0/0xf0 [ 87.007220] ? vm_mmap_pgoff+0x144/0x2a0 [ 87.011296] ? vma_is_stack_for_current+0xd0/0xd0 [ 87.016151] ? security_socket_setsockopt+0x94/0xc0 [ 87.021180] __sys_setsockopt+0x1bd/0x390 [ 87.025336] ? kernel_accept+0x310/0x310 [ 87.029405] ? do_futex+0x27d0/0x27d0 [ 87.033207] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 87.038754] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 87.043604] __x64_sys_setsockopt+0xbe/0x150 [ 87.048023] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 87.053046] do_syscall_64+0x1b1/0x800 [ 87.056936] ? finish_task_switch+0x1ca/0x840 [ 87.061447] ? syscall_return_slowpath+0x5c0/0x5c0 [ 87.066387] ? syscall_return_slowpath+0x30f/0x5c0 [ 87.071332] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 87.076708] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 87.081568] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 87.086756] RIP: 0033:0x4559f9 [ 87.089944] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 87.109320] RSP: 002b:00007fa128640c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 87.117031] RAX: ffffffffffffffda RBX: 00007fa1286416d4 RCX: 00000000004559f9 [ 87.124300] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000013 [ 87.131567] RBP: 000000000072bea0 R08: 0000000000000018 R09: 0000000000000000 [ 87.138834] R10: 0000000020000040 R11: 0000000000000246 R12: 00000000ffffffff [ 87.146102] R13: 00000000004c1035 R14: 00000000004d0d90 R15: 0000000000000000 [ 87.153379] ================================================================== [ 87.160729] Disabling lock debugging due to kernel taint [ 87.166621] Kernel panic - not syncing: panic_on_warn set ... [ 87.166621] [ 87.173995] CPU: 1 PID: 6580 Comm: syz-executor4 Tainted: G B 4.17.0+ #93 [ 87.182214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 87.191561] Call Trace: [ 87.194153] dump_stack+0x1b9/0x294 [ 87.197785] ? dump_stack_print_info.cold.2+0x52/0x52 [ 87.202982] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 87.207741] ? xdp_umem_unpin_pages.isra.4+0x350/0x410 [ 87.213014] panic+0x22f/0x4de [ 87.216212] ? add_taint.cold.5+0x16/0x16 [ 87.220362] ? do_raw_spin_unlock+0x9e/0x2e0 [ 87.224768] ? do_raw_spin_unlock+0x9e/0x2e0 [ 87.229176] ? xdp_umem_unaccount_pages.isra.5+0x3d/0x80 [ 87.234626] kasan_end_report+0x47/0x4f [ 87.238599] kasan_report.cold.7+0x76/0x2fe [ 87.242919] check_memory_region+0x13e/0x1b0 [ 87.247323] kasan_check_write+0x14/0x20 [ 87.251383] xdp_umem_unaccount_pages.isra.5+0x3d/0x80 [ 87.256667] xdp_umem_create+0xd6c/0x10f0 [ 87.260823] ? xdp_put_umem+0x240/0x240 [ 87.264803] ? check_same_owner+0x320/0x320 [ 87.269118] ? get_unmapped_area+0x292/0x3b0 [ 87.273517] ? __might_sleep+0x95/0x190 [ 87.277486] xsk_setsockopt+0x443/0x550 [ 87.281446] ? xsk_init_queue+0xf0/0xf0 [ 87.285407] ? vm_mmap_pgoff+0x144/0x2a0 [ 87.289457] ? vma_is_stack_for_current+0xd0/0xd0 [ 87.294289] ? security_socket_setsockopt+0x94/0xc0 [ 87.299292] __sys_setsockopt+0x1bd/0x390 [ 87.303425] ? kernel_accept+0x310/0x310 [ 87.307474] ? do_futex+0x27d0/0x27d0 [ 87.311262] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 87.316788] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 87.321618] __x64_sys_setsockopt+0xbe/0x150 [ 87.326016] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 87.331024] do_syscall_64+0x1b1/0x800 [ 87.334897] ? finish_task_switch+0x1ca/0x840 [ 87.339378] ? syscall_return_slowpath+0x5c0/0x5c0 [ 87.344293] ? syscall_return_slowpath+0x30f/0x5c0 [ 87.349210] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 87.354558] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 87.359386] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 87.364561] RIP: 0033:0x4559f9 [ 87.367728] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 87.387399] RSP: 002b:00007fa128640c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 87.395095] RAX: ffffffffffffffda RBX: 00007fa1286416d4 RCX: 00000000004559f9 [ 87.402349] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000013 [ 87.409602] RBP: 000000000072bea0 R08: 0000000000000018 R09: 0000000000000000 [ 87.416852] R10: 0000000020000040 R11: 0000000000000246 R12: 00000000ffffffff [ 87.424103] R13: 00000000004c1035 R14: 00000000004d0d90 R15: 0000000000000000 [ 87.431817] Dumping ftrace buffer: [ 87.435343] (ftrace buffer empty) [ 87.439033] Kernel Offset: disabled [ 87.442640] Rebooting in 86400 seconds..