[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 31.449626] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 36.436342] random: sshd: uninitialized urandom read (32 bytes read) [ 37.067218] random: sshd: uninitialized urandom read (32 bytes read) [ 38.384198] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.55' (ECDSA) to the list of known hosts. [ 43.913585] random: sshd: uninitialized urandom read (32 bytes read) 2018/05/17 11:58:45 fuzzer started 2018/05/17 11:58:45 dialing manager at 10.128.0.26:40147 [ 66.019200] can: request_module (can-proto-0) failed. [ 66.030708] can: request_module (can-proto-0) failed. 2018/05/17 11:59:08 kcov=true, comps=false 2018/05/17 11:59:13 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000200)) 2018/05/17 11:59:13 executing program 1: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x401, &(0x7f0000000080), 0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000e8c000)={0x7}) 2018/05/17 11:59:13 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f00000004c0)) 2018/05/17 11:59:13 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="c626262c8523bf012cf66f") r1 = syz_open_procfs(0x0, &(0x7f0000000140)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$DRM_IOCTL_RES_CTX(r1, 0x40086607, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) 2018/05/17 11:59:13 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) 2018/05/17 11:59:13 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) write$binfmt_elf32(r0, &(0x7f0000000740)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x38, 0x0, 0x0, 0x0, 0x20}, [{}]}, 0x58) 2018/05/17 11:59:13 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000000)) 2018/05/17 11:59:13 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8) dup3(r0, r1, 0x0) [ 73.186256] IPVS: ftp: loaded support on port[0] = 21 [ 73.247451] IPVS: ftp: loaded support on port[0] = 21 [ 73.276930] IPVS: ftp: loaded support on port[0] = 21 [ 73.306569] IPVS: ftp: loaded support on port[0] = 21 [ 73.309401] IPVS: ftp: loaded support on port[0] = 21 [ 73.328834] IPVS: ftp: loaded support on port[0] = 21 [ 73.340273] IPVS: ftp: loaded support on port[0] = 21 [ 73.355238] IPVS: ftp: loaded support on port[0] = 21 [ 75.096623] ip (4721) used greatest stack depth: 54344 bytes left [ 75.353185] ip (4740) used greatest stack depth: 54088 bytes left [ 75.799445] ip (4777) used greatest stack depth: 54072 bytes left [ 76.301301] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.307923] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.349480] device bridge_slave_0 entered promiscuous mode [ 76.559457] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.565967] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.604784] device bridge_slave_1 entered promiscuous mode [ 76.677761] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.684245] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.730692] device bridge_slave_0 entered promiscuous mode [ 76.751137] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.757649] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.792238] device bridge_slave_0 entered promiscuous mode [ 76.812280] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 76.873915] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.880469] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.906167] device bridge_slave_0 entered promiscuous mode [ 76.940963] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.947524] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.967424] device bridge_slave_0 entered promiscuous mode [ 76.980182] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.986708] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.000760] device bridge_slave_1 entered promiscuous mode [ 77.023436] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.029960] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.059456] device bridge_slave_1 entered promiscuous mode [ 77.083324] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.089810] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.104503] device bridge_slave_1 entered promiscuous mode [ 77.121185] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 77.129293] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.135773] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.158918] device bridge_slave_0 entered promiscuous mode [ 77.182207] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.188780] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.207789] device bridge_slave_0 entered promiscuous mode [ 77.232015] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 77.240475] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.246988] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.259931] device bridge_slave_1 entered promiscuous mode [ 77.267439] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.273951] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.290910] device bridge_slave_0 entered promiscuous mode [ 77.317185] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 77.326274] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 77.335170] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.341643] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.372412] device bridge_slave_1 entered promiscuous mode [ 77.404373] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 77.441716] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.448239] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.500587] device bridge_slave_1 entered promiscuous mode [ 77.536859] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 77.569763] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.576321] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.604397] device bridge_slave_1 entered promiscuous mode [ 77.618975] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 77.629766] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 77.645796] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 77.687970] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 77.708158] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 77.759307] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 77.803564] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 77.860675] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 77.913771] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 77.923614] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 77.939384] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 78.041485] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 78.165506] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 78.176349] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 78.185818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.298699] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 78.342906] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 78.428553] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 78.535637] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 78.547642] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 78.562390] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 78.610974] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 78.642882] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 78.650472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.668971] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 78.700247] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 78.721998] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 78.729140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.750966] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 78.852750] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 78.879388] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 78.886439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.908681] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 78.915807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.973823] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 78.982163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.004446] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 79.023548] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 79.030710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.052386] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 79.059476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.097374] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 79.121516] team0: Port device team_slave_0 added [ 79.140635] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 79.148296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.172156] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 79.179234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.219332] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 79.227620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.271618] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 79.278679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.297610] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 79.308865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.384230] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 79.403637] team0: Port device team_slave_1 added [ 79.457439] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 79.468731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.489215] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 79.503202] team0: Port device team_slave_0 added [ 79.598721] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 79.605837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.618753] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.762640] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 79.789908] team0: Port device team_slave_1 added [ 79.811206] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 79.821072] team0: Port device team_slave_0 added [ 79.863648] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 79.876128] team0: Port device team_slave_0 added [ 79.881988] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 79.896991] team0: Port device team_slave_0 added [ 79.913988] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 79.921494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.938563] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.978207] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 80.001139] team0: Port device team_slave_0 added [ 80.038291] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 80.056262] team0: Port device team_slave_0 added [ 80.071597] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 80.081924] team0: Port device team_slave_0 added [ 80.096756] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 80.104525] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 80.114486] team0: Port device team_slave_1 added [ 80.120971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.142381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.189681] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 80.210444] team0: Port device team_slave_1 added [ 80.223843] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 80.233241] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 80.246925] team0: Port device team_slave_1 added [ 80.264278] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 80.273982] team0: Port device team_slave_1 added [ 80.287620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.305300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.339277] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 80.348166] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 80.356200] team0: Port device team_slave_1 added [ 80.367291] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 80.376294] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 80.384499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.401741] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.424753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.450996] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.478737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.489545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.500678] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 80.508661] team0: Port device team_slave_1 added [ 80.525714] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 80.536722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.545392] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.569246] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 80.578681] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.610943] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.636294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.661448] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.681214] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 80.693563] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.709201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.726599] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 80.740787] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 80.749881] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 80.756965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.770149] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.793835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.830121] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.854235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.867199] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.875844] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 80.883771] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 80.891222] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 80.913575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.928265] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.942687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.964299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.976919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.985950] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.994871] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 81.005209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.018186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.029418] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 81.039527] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 81.048912] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 81.070312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.093267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.118736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.142499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.157718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.168135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.182245] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 81.189882] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.199662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.210867] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 81.226274] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 81.243499] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 81.251077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.264827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.291895] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.313771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.328613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.337670] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.351709] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 81.360873] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 81.373961] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 81.393895] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.408217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.442179] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.470116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.494018] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.504942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.522364] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 81.530895] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.542179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.564505] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 81.572683] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.584748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.754674] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 81.762968] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.782898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.236412] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.242929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.249781] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.256244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.280845] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 83.300499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.680713] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.687217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.694104] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.700575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.714979] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 83.750005] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.756551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.763402] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.769872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.813302] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 83.830568] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.837096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.843955] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.850422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.877948] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 83.899441] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.905966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.912797] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.919232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.978140] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 83.986428] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.992945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.999791] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.006311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.015685] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 84.048155] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.054665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.061523] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.068024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.125741] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 84.164582] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.171112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.177945] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.184399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.257985] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 84.319207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.332748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.349103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.365662] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.380273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.388014] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.396535] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 92.040538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.526395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.577729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.597908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.625663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.658186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.870217] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 92.902366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.941513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.319970] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 93.350383] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 93.381125] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 93.433720] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 93.483480] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 93.670826] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 93.755655] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 93.762186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.774126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.812874] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 94.147931] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 94.154336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.164830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.212665] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 94.224140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.234230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.270565] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 94.284189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.303970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.324731] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 94.352256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.380394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.401111] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 94.411468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.422668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.444005] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 94.483210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.515321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.639415] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.724370] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 94.730754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.742524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.994491] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.033279] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.096797] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.192575] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.320208] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.347500] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.540476] 8021q: adding VLAN 0 to HW filter on device team0 2018/05/17 11:59:40 executing program 6: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4c, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0xfffffffffffffdc3, 0x5a6d8d97750cae5e) [ 99.799017] ================================================================== [ 99.806476] BUG: KMSAN: uninit-value in __hrtimer_run_queues+0x39a/0x15d0 [ 99.813430] CPU: 1 PID: 6593 Comm: syz-executor7 Not tainted 4.17.0-rc5+ #97 [ 99.820635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 99.830013] Call Trace: [ 99.832604] [ 99.834768] dump_stack+0x185/0x1d0 [ 99.838413] ? __hrtimer_run_queues+0x39a/0x15d0 [ 99.843188] kmsan_report+0x142/0x240 [ 99.847003] __msan_warning_32+0x6c/0xb0 [ 99.851081] __hrtimer_run_queues+0x39a/0x15d0 [ 99.855688] hrtimer_interrupt+0x451/0x13c0 [ 99.860031] ? __msan_poison_alloca+0x15c/0x1d0 [ 99.864723] ? trace_local_timer_entry+0x2f/0x1d0 [ 99.869706] ? hrtimer_init+0x5b0/0x5b0 [ 99.873701] local_apic_timer_interrupt+0x66/0x230 [ 99.878650] smp_apic_timer_interrupt+0x5a/0x90 [ 99.883338] apic_timer_interrupt+0xf/0x20 [ 99.887582] [ 99.889842] RIP: 0010:lock_page_memcg+0x41/0x300 [ 99.894599] RSP: 0018:ffff88014f31f1f8 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 99.902323] RAX: ffff8801fdc8fdc8 RBX: ffffea0008ec4ca0 RCX: ffff880000000000 [ 99.909602] RDX: ffff8801fd88fdc8 RSI: aaaaaaaaaaaab000 RDI: ffffea0000000000 [ 99.916884] RBP: ffff88014f31f250 R08: 0000000000000000 R09: 0000000000000002 [ 99.924167] R10: ffffffff8a001508 R11: 0000000000000000 R12: 0000000000000000 [ 99.931467] R13: ffffea0008ec4ca0 R14: 0000000000000001 R15: ffff8801525bc358 [ 99.938766] ? __entry_text_end+0x3/0x3 [ 99.942759] ? lock_page_memcg+0x3e/0x300 [ 99.946921] ? page_remove_rmap+0xe5/0xe30 [ 99.951162] ? unmap_page_range+0x1db4/0x3be0 [ 99.955673] page_remove_rmap+0x1bb/0xe30 [ 99.959840] unmap_page_range+0x1db4/0x3be0 [ 99.964184] unmap_single_vma+0x45b/0x5f0 [ 99.968337] unmap_vmas+0x1f4/0x360 [ 99.971970] exit_mmap+0x43d/0x970 [ 99.975515] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 99.980895] ? uprobe_clear_state+0x1b0/0x270 [ 99.985428] ? __mmput+0x3f/0x610 [ 99.988896] __mmput+0x16c/0x610 [ 99.991692] netlink: 'syz-executor6': attribute type 4 has an invalid length. [ 99.992270] mmput+0xab/0xf0 [ 99.992287] flush_old_exec+0x1adb/0x2170 [ 99.992305] load_elf_binary+0x134a/0x8f70 [ 99.992337] ? kmsan_set_origin_inline+0x6b/0x120 [ 99.999750] netlink: 17 bytes leftover after parsing attributes in process `syz-executor6'. [ 100.002628] ? kmsan_set_origin_inline+0x6b/0x120 [ 100.002638] ? __msan_poison_alloca+0x15c/0x1d0 [ 100.002650] ? search_binary_handler+0x2ef/0xac0 [ 100.002660] ? load_script+0x5c/0xcd0 [ 100.002671] ? search_binary_handler+0x2ef/0xac0 [ 100.002680] ? load_elf_binary+0x4bd1/0x8f70 [ 100.002691] ? search_binary_handler+0x27f/0xac0 [ 100.002705] ? load_script+0xcd0/0xcd0 [ 100.002716] search_binary_handler+0x2ef/0xac0 [ 100.002742] do_execveat_common+0x22e4/0x2da0 [ 100.069253] __x64_sys_execve+0x127/0x180 [ 100.073404] do_syscall_64+0x154/0x220 [ 100.077292] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 100.082467] RIP: 0033:0x454397 [ 100.085640] RSP: 002b:0000000000a3fac8 EFLAGS: 00000207 ORIG_RAX: 000000000000003b [ 100.093334] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000454397 [ 100.100590] RDX: 00007ffcdb98c5c8 RSI: 0000000000a3fb00 RDI: 00000000004c8ca8 [ 100.107848] RBP: 0000000000a3fc80 R08: 0000000000000000 R09: 000000000000002d [ 100.115118] R10: 0000000000000008 R11: 0000000000000207 R12: 0000000000a3ff18 [ 100.122468] R13: 0000000000a3fe28 R14: 0000000000000000 R15: 0000000000000000 [ 100.129729] [ 100.131339] Uninit was stored to memory at: [ 100.135655] kmsan_internal_chain_origin+0x12b/0x210 [ 100.140744] __msan_chain_origin+0x69/0xc0 [ 100.144962] timerqueue_add+0x472/0x4f0 [ 100.148922] __hrtimer_run_queues+0x1228/0x15d0 [ 100.153576] hrtimer_interrupt+0x451/0x13c0 [ 100.157887] local_apic_timer_interrupt+0x66/0x230 [ 100.162802] smp_apic_timer_interrupt+0x5a/0x90 [ 100.167451] Uninit was stored to memory at: [ 100.171773] kmsan_internal_chain_origin+0x12b/0x210 [ 100.176860] __msan_chain_origin+0x69/0xc0 [ 100.181079] timerqueue_add+0x472/0x4f0 [ 100.185037] __hrtimer_run_queues+0x1228/0x15d0 [ 100.189693] hrtimer_interrupt+0x451/0x13c0 [ 100.194003] local_apic_timer_interrupt+0x66/0x230 [ 100.198921] smp_apic_timer_interrupt+0x5a/0x90 [ 100.203570] Local variable description: ----head@free_pcppages_bulk [ 100.209953] Variable was created at: [ 100.213654] free_pcppages_bulk+0x9e/0x12e0 [ 100.217958] free_unref_page_commit+0x358/0x4d0 [ 100.222605] ================================================================== [ 100.229950] Disabling lock debugging due to kernel taint [ 100.235406] Kernel panic - not syncing: panic_on_warn set ... [ 100.235406] [ 100.242801] CPU: 1 PID: 6593 Comm: syz-executor7 Tainted: G B 4.17.0-rc5+ #97 [ 100.251357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 100.260695] Call Trace: [ 100.263262] [ 100.265405] dump_stack+0x185/0x1d0 [ 100.269128] panic+0x39d/0x940 [ 100.272321] ? __hrtimer_run_queues+0x39a/0x15d0 [ 100.277064] kmsan_report+0x238/0x240 [ 100.280851] __msan_warning_32+0x6c/0xb0 [ 100.284913] __hrtimer_run_queues+0x39a/0x15d0 [ 100.289490] hrtimer_interrupt+0x451/0x13c0 [ 100.294324] ? __msan_poison_alloca+0x15c/0x1d0 [ 100.298987] ? trace_local_timer_entry+0x2f/0x1d0 [ 100.303819] ? hrtimer_init+0x5b0/0x5b0 [ 100.307780] local_apic_timer_interrupt+0x66/0x230 [ 100.312697] smp_apic_timer_interrupt+0x5a/0x90 [ 100.317351] apic_timer_interrupt+0xf/0x20 [ 100.321576] [ 100.323820] RIP: 0010:lock_page_memcg+0x41/0x300 [ 100.328558] RSP: 0018:ffff88014f31f1f8 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 100.336255] RAX: ffff8801fdc8fdc8 RBX: ffffea0008ec4ca0 RCX: ffff880000000000 [ 100.343521] RDX: ffff8801fd88fdc8 RSI: aaaaaaaaaaaab000 RDI: ffffea0000000000 [ 100.350787] RBP: ffff88014f31f250 R08: 0000000000000000 R09: 0000000000000002 [ 100.358045] R10: ffffffff8a001508 R11: 0000000000000000 R12: 0000000000000000 [ 100.365299] R13: ffffea0008ec4ca0 R14: 0000000000000001 R15: ffff8801525bc358 [ 100.372569] ? __entry_text_end+0x3/0x3 [ 100.376531] ? lock_page_memcg+0x3e/0x300 [ 100.380665] ? page_remove_rmap+0xe5/0xe30 [ 100.384885] ? unmap_page_range+0x1db4/0x3be0 [ 100.389370] page_remove_rmap+0x1bb/0xe30 [ 100.393511] unmap_page_range+0x1db4/0x3be0 [ 100.397835] unmap_single_vma+0x45b/0x5f0 [ 100.401972] unmap_vmas+0x1f4/0x360 [ 100.405599] exit_mmap+0x43d/0x970 [ 100.409130] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 100.414493] ? uprobe_clear_state+0x1b0/0x270 [ 100.418985] ? __mmput+0x3f/0x610 [ 100.422433] __mmput+0x16c/0x610 [ 100.425795] mmput+0xab/0xf0 [ 100.428812] flush_old_exec+0x1adb/0x2170 [ 100.432966] load_elf_binary+0x134a/0x8f70 [ 100.437205] ? kmsan_set_origin_inline+0x6b/0x120 [ 100.442054] ? kmsan_set_origin_inline+0x6b/0x120 [ 100.446901] ? __msan_poison_alloca+0x15c/0x1d0 [ 100.451565] ? search_binary_handler+0x2ef/0xac0 [ 100.456310] ? load_script+0x5c/0xcd0 [ 100.460099] ? search_binary_handler+0x2ef/0xac0 [ 100.464841] ? load_elf_binary+0x4bd1/0x8f70 [ 100.469244] ? search_binary_handler+0x27f/0xac0 [ 100.473988] ? load_script+0xcd0/0xcd0 [ 100.477863] search_binary_handler+0x2ef/0xac0 [ 100.482444] do_execveat_common+0x22e4/0x2da0 [ 100.486937] __x64_sys_execve+0x127/0x180 [ 100.491077] do_syscall_64+0x154/0x220 [ 100.494955] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 100.500133] RIP: 0033:0x454397 [ 100.503309] RSP: 002b:0000000000a3fac8 EFLAGS: 00000207 ORIG_RAX: 000000000000003b [ 100.511003] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000454397 [ 100.518258] RDX: 00007ffcdb98c5c8 RSI: 0000000000a3fb00 RDI: 00000000004c8ca8 [ 100.525517] RBP: 0000000000a3fc80 R08: 0000000000000000 R09: 000000000000002d [ 100.532772] R10: 0000000000000008 R11: 0000000000000207 R12: 0000000000a3ff18 [ 100.540036] R13: 0000000000a3fe28 R14: 0000000000000000 R15: 0000000000000000 [ 101.669660] Shutting down cpus with NMI [ 101.685358] Dumping ftrace buffer: [ 101.688899] (ftrace buffer empty) [ 101.692592] Kernel Offset: disabled [ 101.696205] Rebooting in 86400 seconds..