[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 30.594439] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. [ 30.992621] random: sshd: uninitialized urandom read (32 bytes read) [ 31.279951] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 32.650928] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.38' (ECDSA) to the list of known hosts. [ 38.215966] random: sshd: uninitialized urandom read (32 bytes read) 2018/06/08 00:01:41 fuzzer started [ 39.746659] random: cc1: uninitialized urandom read (8 bytes read) 2018/06/08 00:01:43 dialing manager at 10.128.0.26:42401 [ 65.343305] can: request_module (can-proto-0) failed. [ 65.354362] can: request_module (can-proto-0) failed. 2018/06/08 00:02:10 kcov=true, comps=false 00:02:16 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x10ad}, 0xfe80) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x7, 0x0, 0x1, 0x1}], {0x95}}, &(0x7f0000000000)='syzkaller\x00', 0x5c6e, 0x4ab, &(0x7f0000000040)=""/251}, 0x48) 00:02:16 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000008880)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000008840)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@set_option={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000380), r1, 0x0, 0x1, 0x4}}, 0x20) 00:02:16 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000380)=0x200000000) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x400) close(r1) syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 00:02:16 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x90000915, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000140)}) 00:02:16 executing program 1: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001500ff09fffefd956fa283b70aa6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) 00:02:16 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x90000915, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000140)}) 00:02:16 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x10ad}, 0xfe80) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x7, 0x1f, 0x1, 0x1, 0x1}], {0x95}}, &(0x7f0000000000)='syzkaller\x00', 0x5c6e, 0x4ab, &(0x7f0000000040)=""/251}, 0x48) 00:02:16 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"6966623000faffffffffffffff00", 0x6002}) pread64(r1, &(0x7f0000000140)=""/204, 0xcc, 0x0) dup3(r0, r1, 0x0) r2 = socket(0x11, 0x100000803, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000003440)={'ifb0\x00', 0xa1fd}) [ 73.926601] IPVS: ftp: loaded support on port[0] = 21 [ 73.993983] IPVS: ftp: loaded support on port[0] = 21 [ 74.018591] IPVS: ftp: loaded support on port[0] = 21 [ 74.057927] IPVS: ftp: loaded support on port[0] = 21 [ 74.092280] IPVS: ftp: loaded support on port[0] = 21 [ 74.106009] IPVS: ftp: loaded support on port[0] = 21 [ 74.108117] IPVS: ftp: loaded support on port[0] = 21 [ 74.135587] IPVS: ftp: loaded support on port[0] = 21 [ 75.775569] ip (4674) used greatest stack depth: 54440 bytes left [ 76.526875] ip (4736) used greatest stack depth: 54328 bytes left [ 77.255150] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.261661] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.309787] device bridge_slave_0 entered promiscuous mode [ 77.435270] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.441748] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.475615] device bridge_slave_0 entered promiscuous mode [ 77.512364] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.518842] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.537659] device bridge_slave_1 entered promiscuous mode [ 77.558202] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.564641] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.590539] device bridge_slave_0 entered promiscuous mode [ 77.607605] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.614095] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.633175] device bridge_slave_0 entered promiscuous mode [ 77.652542] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.659136] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.675385] device bridge_slave_0 entered promiscuous mode [ 77.688872] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.695383] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.705655] device bridge_slave_0 entered promiscuous mode [ 77.717486] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.723987] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.748996] device bridge_slave_0 entered promiscuous mode [ 77.766373] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 77.773815] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.780278] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.800586] device bridge_slave_0 entered promiscuous mode [ 77.816116] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.822577] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.839310] device bridge_slave_1 entered promiscuous mode [ 77.857647] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.864101] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.881529] device bridge_slave_1 entered promiscuous mode [ 77.892549] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.898972] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.909300] device bridge_slave_1 entered promiscuous mode [ 77.937623] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 77.944831] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.951343] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.970456] device bridge_slave_1 entered promiscuous mode [ 77.977589] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.984085] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.010510] device bridge_slave_1 entered promiscuous mode [ 78.023424] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.029889] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.053166] device bridge_slave_1 entered promiscuous mode [ 78.061859] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.068284] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.090692] device bridge_slave_1 entered promiscuous mode [ 78.109705] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 78.124272] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 78.132799] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 78.140519] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 78.205455] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 78.224791] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 78.329525] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 78.339808] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 78.354353] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 78.363145] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 78.379249] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 78.408485] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 78.427669] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 78.518724] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 78.559265] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 78.808464] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 78.898783] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 78.972533] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 79.019391] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 79.029895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.046022] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 79.103294] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 79.113630] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 79.126721] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 79.158399] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 79.167846] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 79.216170] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 79.229371] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 79.245150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.307636] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 79.339575] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 79.349440] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 79.375648] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 79.405288] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 79.429714] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 79.436740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.542257] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 79.549309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.564208] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 79.571826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.591234] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 79.602424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.623378] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 79.630358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.654726] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 79.661675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.675919] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 79.702845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.728217] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 79.741718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.763632] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 79.773170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.809208] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 79.816289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.866174] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 79.873447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.885475] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 79.903337] team0: Port device team_slave_0 added [ 79.930272] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 79.938130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.957653] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 79.971273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.061798] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 80.093402] team0: Port device team_slave_1 added [ 80.301006] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.381089] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 80.415092] team0: Port device team_slave_0 added [ 80.453505] ip (5008) used greatest stack depth: 54056 bytes left [ 80.467355] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 80.477505] team0: Port device team_slave_0 added [ 80.497405] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 80.509101] team0: Port device team_slave_0 added [ 80.536578] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 80.555858] team0: Port device team_slave_0 added [ 80.561422] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 80.571205] team0: Port device team_slave_0 added [ 80.576921] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 80.585761] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 80.600139] team0: Port device team_slave_0 added [ 80.628731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.659646] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.686965] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 80.702365] team0: Port device team_slave_0 added [ 80.717203] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 80.727923] team0: Port device team_slave_1 added [ 80.733539] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 80.743305] team0: Port device team_slave_1 added [ 80.751005] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 80.760558] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 80.775757] team0: Port device team_slave_1 added [ 80.797559] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 80.812830] team0: Port device team_slave_1 added [ 80.829936] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.856420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.889281] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 80.902910] team0: Port device team_slave_1 added [ 80.917511] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 80.930419] team0: Port device team_slave_1 added [ 80.943821] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 80.953548] team0: Port device team_slave_1 added [ 80.959507] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 80.966659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.994936] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.010719] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 81.018673] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 81.027616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.050097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.079346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.095014] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.118512] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 81.126595] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 81.147139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.158241] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.173744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.190559] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.204413] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 81.211442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.222500] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.233515] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 81.243831] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 81.261218] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 81.273258] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 81.280671] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 81.287821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.308523] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.352663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.386847] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.409573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.418423] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.426833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.434682] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.442445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.450420] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.463405] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 81.470882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.479510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.499223] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 81.514339] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 81.523364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.532381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.543446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.570873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.587619] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 81.597270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.610461] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.622146] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 81.630516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.639260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.656465] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 81.674526] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 81.684060] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.708127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.734725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.754865] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.782392] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 81.790390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.800534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.812093] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 81.819612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.831320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.861527] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 81.880579] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 81.893382] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 81.903976] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 81.911683] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.934409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.964003] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.992372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.004446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.014086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.022292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.030577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.039504] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 82.049558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.066404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.101323] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 82.110492] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 82.119828] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 82.130484] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 82.139594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.173750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.208191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.240443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.264739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.282128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.292730] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.302275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.891697] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.898181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.905048] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.911505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.957179] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 83.963794] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.328096] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.334563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.341381] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.347827] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.370742] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 84.381523] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.387957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.394759] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.401184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.414957] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 84.427760] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.434177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.440926] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.447324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.455805] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 84.475682] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.482113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.488863] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.495271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.510149] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 84.526862] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.533308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.540154] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.546582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.622884] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 84.629432] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.635903] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.642649] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.649093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.664110] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 84.686867] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.693307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.700101] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.706496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.743483] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 85.023894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.038516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.071102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.085271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.101443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.110252] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.117900] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 92.717626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.844546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.876842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.944806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.987235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.155521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.214591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.377522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.467240] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 93.621681] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 93.691680] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 93.777749] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 93.872702] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 93.959630] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 94.074184] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 94.160119] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 94.289935] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 94.296382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.314746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.372471] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 94.378778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.392249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.454674] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 94.461123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.481935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.649669] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 94.656183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.667809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.743515] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 94.756547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.773256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.812557] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 94.826156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.845304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.880203] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 94.891937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.903281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.007404] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 95.013755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 95.022593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.229745] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.253198] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.297725] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.481314] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.597337] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.675642] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.832441] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.852177] 8021q: adding VLAN 0 to HW filter on device team0 00:02:42 executing program 1: 00:02:43 executing program 1: [ 100.950526] device ifb0 entered promiscuous mode [ 101.458923] ================================================================== [ 101.466342] BUG: KMSAN: uninit-value in _copy_to_iter+0x45f/0x2800 [ 101.472641] CPU: 0 PID: 6612 Comm: syz-executor4 Not tainted 4.17.0+ #3 [ 101.479401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 101.488752] Call Trace: [ 101.491342] dump_stack+0x185/0x1d0 [ 101.494966] ? kmsan_internal_check_memory+0x116/0x1e0 [ 101.500240] kmsan_report+0x149/0x260 [ 101.504035] kmsan_internal_check_memory+0x135/0x1e0 [ 101.509125] kmsan_copy_to_user+0x75/0x160 [ 101.513342] ? _copy_to_iter+0x92/0x2800 [ 101.517396] _copy_to_iter+0x45f/0x2800 [ 101.521352] ? finish_wait+0x10a/0x3e0 [ 101.525229] vhost_chr_read_iter+0x7b3/0xc30 [ 101.529619] ? init_wait_entry+0x1a0/0x1a0 [ 101.533851] vhost_net_chr_read_iter+0xf6/0x130 [ 101.538508] ? vhost_net_exit+0x30/0x30 [ 101.542556] do_iter_readv_writev+0x81c/0xa20 [ 101.547044] ? vhost_net_exit+0x30/0x30 [ 101.550999] do_iter_read+0x303/0xd80 [ 101.554786] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 101.560229] do_readv+0x295/0x5f0 [ 101.563694] __x64_sys_readv+0xe1/0x120 [ 101.567668] ? vfs_readv+0x260/0x260 [ 101.571385] do_syscall_64+0x15b/0x230 [ 101.575286] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 101.580485] RIP: 0033:0x4559f9 [ 101.583653] RSP: 002b:00007f3ff0b39c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 101.591343] RAX: ffffffffffffffda RBX: 00007f3ff0b3a6d4 RCX: 00000000004559f9 [ 101.598592] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000013 [ 101.605938] RBP: 000000000072bf50 R08: 0000000000000000 R09: 0000000000000000 [ 101.613201] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 101.620456] R13: 00000000004c046f R14: 00000000004cfad8 R15: 0000000000000001 [ 101.627706] [ 101.629310] Uninit was created at: [ 101.632849] kmsan_internal_poison_shadow+0xb8/0x1b0 [ 101.637941] kmsan_kmalloc+0x94/0x100 [ 101.641727] __kmalloc+0x13a/0x350 [ 101.645257] translate_desc+0xbef/0x1120 [ 101.649387] vhost_update_used_flags+0x469/0x8d0 [ 101.654124] vhost_vq_init_access+0x173/0xa20 [ 101.658604] vhost_net_ioctl+0x2217/0x3450 [ 101.662825] do_vfs_ioctl+0xcbd/0x24b0 [ 101.666702] __x64_sys_ioctl+0x280/0x320 [ 101.670750] do_syscall_64+0x15b/0x230 [ 101.674618] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 101.679781] [ 101.681387] Bytes 4-7 of 72 are uninitialized [ 101.685868] Memory access starts at ffff88019840ede0 [ 101.690947] ================================================================== [ 101.698282] Disabling lock debugging due to kernel taint [ 101.703709] Kernel panic - not syncing: panic_on_warn set ... [ 101.703709] [ 101.711145] CPU: 0 PID: 6612 Comm: syz-executor4 Tainted: G B 4.17.0+ #3 [ 101.719275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 101.728609] Call Trace: [ 101.731194] dump_stack+0x185/0x1d0 [ 101.734812] panic+0x3d0/0x990 [ 101.737990] ? kmsan_internal_check_memory+0x116/0x1e0 [ 101.743248] kmsan_report+0x260/0x260 [ 101.747036] kmsan_internal_check_memory+0x135/0x1e0 [ 101.752127] kmsan_copy_to_user+0x75/0x160 [ 101.756340] ? _copy_to_iter+0x92/0x2800 [ 101.760380] _copy_to_iter+0x45f/0x2800 [ 101.764343] ? finish_wait+0x10a/0x3e0 [ 101.768218] vhost_chr_read_iter+0x7b3/0xc30 [ 101.772604] ? init_wait_entry+0x1a0/0x1a0 [ 101.776836] vhost_net_chr_read_iter+0xf6/0x130 [ 101.781488] ? vhost_net_exit+0x30/0x30 [ 101.785450] do_iter_readv_writev+0x81c/0xa20 [ 101.790202] ? vhost_net_exit+0x30/0x30 [ 101.794158] do_iter_read+0x303/0xd80 [ 101.797951] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 101.803395] do_readv+0x295/0x5f0 [ 101.806833] __x64_sys_readv+0xe1/0x120 [ 101.810790] ? vfs_readv+0x260/0x260 [ 101.814497] do_syscall_64+0x15b/0x230 [ 101.818371] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 101.823538] RIP: 0033:0x4559f9 [ 101.826710] RSP: 002b:00007f3ff0b39c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 101.835253] RAX: ffffffffffffffda RBX: 00007f3ff0b3a6d4 RCX: 00000000004559f9 [ 101.842512] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000013 [ 101.849768] RBP: 000000000072bf50 R08: 0000000000000000 R09: 0000000000000000 [ 101.857207] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 101.864468] R13: 00000000004c046f R14: 00000000004cfad8 R15: 0000000000000001 [ 101.872195] Dumping ftrace buffer: [ 101.875722] (ftrace buffer empty) [ 101.879407] Kernel Offset: disabled [ 101.883009] Rebooting in 86400 seconds..