[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 30.167669] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c[ 30.302607] random: sshd: uninitialized urandom read (32 bytes read) . [ 30.631356] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 31.927528] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.8' (ECDSA) to the list of known hosts. [ 37.465246] random: sshd: uninitialized urandom read (32 bytes read) 2018/06/03 04:06:28 fuzzer started 2018/06/03 04:06:29 dialing manager at 10.128.0.26:37137 [ 62.813488] can: request_module (can-proto-0) failed. [ 62.824316] can: request_module (can-proto-0) failed. 2018/06/03 04:06:55 kcov=true, comps=false 2018/06/03 04:07:02 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001c00070f000000000000000007000000", @ANYBLOB="02c602000a000200000000000000001f"], 0x2}, 0x1}, 0x0) 2018/06/03 04:07:02 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") mprotect(&(0x7f00004d9000/0x3000)=nil, 0x0, 0x0) 2018/06/03 04:07:02 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101001, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="0bf5430f000319", 0x7}], 0x1) 2018/06/03 04:07:02 executing program 7: r0 = socket$inet(0x10, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readlink(&(0x7f0000000080)='\x00', &(0x7f00000000c0)=""/88, 0x58) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000003000)=[{&(0x7f000000efdc)="240000004a00030007fffd946fa283bc0a008000020f0000031d8568791ba3a2d188737e", 0x24}], 0x1}, 0x0) 2018/06/03 04:07:02 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40bc5311, &(0x7f0000000240)={0x80, 0x1}) 2018/06/03 04:07:02 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f00d82c99240970") r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bridge0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001c00070f000000000000000007000000", @ANYBLOB="02c602000a000200000000000000001f"], 0x2}, 0x1}, 0x0) 2018/06/03 04:07:02 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) sendmmsg(r0, &(0x7f0000006bc0)=[{{&(0x7f0000000040)=@in={0x2, 0x0, @multicast1=0xe0000001}, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000000200)}}], 0x1, 0x0) 2018/06/03 04:07:02 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000380)=0x200000000) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r2) syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1) [ 71.936844] IPVS: ftp: loaded support on port[0] = 21 [ 71.940409] IPVS: ftp: loaded support on port[0] = 21 [ 72.019892] IPVS: ftp: loaded support on port[0] = 21 [ 72.035108] IPVS: ftp: loaded support on port[0] = 21 [ 72.044937] IPVS: ftp: loaded support on port[0] = 21 [ 72.050794] IPVS: ftp: loaded support on port[0] = 21 [ 72.071078] IPVS: ftp: loaded support on port[0] = 21 [ 72.116581] IPVS: ftp: loaded support on port[0] = 21 [ 73.915235] ip (4676) used greatest stack depth: 54520 bytes left [ 74.194690] ip (4699) used greatest stack depth: 53880 bytes left [ 75.344614] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.351104] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.401152] device bridge_slave_0 entered promiscuous mode [ 75.434252] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.440722] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.452677] device bridge_slave_0 entered promiscuous mode [ 75.460831] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.467287] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.477504] device bridge_slave_0 entered promiscuous mode [ 75.492609] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.499139] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.519280] device bridge_slave_0 entered promiscuous mode [ 75.590946] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.597463] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.630594] device bridge_slave_1 entered promiscuous mode [ 75.652179] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.658781] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.686861] device bridge_slave_1 entered promiscuous mode [ 75.706204] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.713521] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.731584] device bridge_slave_1 entered promiscuous mode [ 75.743620] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.750211] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.769243] device bridge_slave_0 entered promiscuous mode [ 75.797148] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.803614] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.818215] device bridge_slave_0 entered promiscuous mode [ 75.835208] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 75.842822] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.849305] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.866513] device bridge_slave_1 entered promiscuous mode [ 75.874616] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.881103] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.891685] device bridge_slave_0 entered promiscuous mode [ 75.912383] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.918926] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.938438] device bridge_slave_0 entered promiscuous mode [ 75.958955] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 75.967223] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 75.975494] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.981936] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.997230] device bridge_slave_1 entered promiscuous mode [ 76.011420] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.017953] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.029184] device bridge_slave_1 entered promiscuous mode [ 76.053711] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 76.061947] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 76.069919] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.076460] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.125095] device bridge_slave_1 entered promiscuous mode [ 76.172286] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 76.184640] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 76.197212] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.203684] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.238293] device bridge_slave_1 entered promiscuous mode [ 76.255692] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 76.294525] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 76.308924] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 76.336379] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 76.368870] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 76.431947] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 76.521626] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 76.552158] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 76.641656] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 76.735928] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 76.847771] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 76.872517] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 76.921758] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 76.960415] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 77.069987] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 77.094499] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 77.128586] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 77.148457] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 77.159407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.197592] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 77.219720] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 77.232485] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 77.261480] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 77.274189] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 77.308764] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 77.319767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.461996] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 77.469112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.484477] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 77.496798] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 77.510555] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 77.517502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.543532] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 77.554180] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 77.564167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.582427] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 77.589435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.697423] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 77.704546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.724932] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 77.732264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.749346] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 77.762186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.817801] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 77.824785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.874842] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 77.884576] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 77.892259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.909867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.941524] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 77.949780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.030995] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 78.061534] team0: Port device team_slave_0 added [ 78.136169] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 78.146073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.202073] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 78.250965] team0: Port device team_slave_0 added [ 78.300170] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 78.318656] team0: Port device team_slave_1 added [ 78.333433] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 78.342846] team0: Port device team_slave_0 added [ 78.397478] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 78.408869] team0: Port device team_slave_0 added [ 78.478117] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 78.497450] team0: Port device team_slave_1 added [ 78.519836] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 78.531318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.554658] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.590177] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 78.616846] team0: Port device team_slave_0 added [ 78.622817] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 78.636694] team0: Port device team_slave_0 added [ 78.650581] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 78.665284] team0: Port device team_slave_1 added [ 78.681293] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 78.700896] team0: Port device team_slave_0 added [ 78.733463] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 78.740425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.758935] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.777217] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 78.789801] team0: Port device team_slave_1 added [ 78.796776] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 78.803777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.831685] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.853725] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 78.864432] team0: Port device team_slave_1 added [ 78.886548] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 78.900872] team0: Port device team_slave_1 added [ 78.921893] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 78.932498] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 78.945366] team0: Port device team_slave_0 added [ 78.955683] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 78.980948] team0: Port device team_slave_1 added [ 78.992081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.005793] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.027993] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 79.037303] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 79.055871] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 79.064414] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 79.083903] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 79.092347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.127953] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.160788] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.195139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.213657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.223544] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.231401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.239324] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.246891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.254853] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.262956] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 79.271135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.279409] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.293111] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 79.306906] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 79.325848] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 79.335519] team0: Port device team_slave_1 added [ 79.342677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.352016] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.370158] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.384718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.403398] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 79.415598] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 79.424997] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 79.432157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.446114] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.479697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.498661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.520792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.530435] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.542680] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 79.554509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.567904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.581994] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 79.592018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.600968] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.617778] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 79.631918] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 79.640542] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 79.651490] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 79.659296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.676885] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.711550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.740119] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.760699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.776136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.785227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.793539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.802421] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 79.812268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.821086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.837337] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 79.858545] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 79.866339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.875181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.896208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.910305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.941254] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 79.957999] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 79.972926] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 79.981885] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.012549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.043679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.067800] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.085695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.100995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.113350] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 80.132553] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 80.140239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.153122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.167773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.177091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.189195] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 80.216350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.237192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.274808] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 80.283221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.315885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.477376] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 80.484875] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.496649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.106446] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.112923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.119750] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.126181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.157277] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 82.163790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.206086] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.212536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.219323] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.225752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.277646] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 82.295581] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.303932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.310751] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.318130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.376221] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 82.398238] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.404695] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.411454] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.417849] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.426814] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 82.447293] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.453746] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.460567] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.467077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.540465] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 82.563579] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.570093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.576901] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.583344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.632956] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 82.650462] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.656922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.663725] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.670179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.679522] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 83.067190] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.073672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.080476] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.086922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.099123] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 83.167269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.179449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.214812] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.246776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.271057] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.287670] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.296145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.806415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.938692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.968715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.077272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.216878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.393474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.514682] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 91.573338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.725537] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 91.839349] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 91.872414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.935672] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 92.129523] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 92.137395] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 92.239382] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 92.245704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.258857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.388278] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 92.508290] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 92.515137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.535149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.618249] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 92.804850] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 92.811263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.822779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.847403] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 92.853796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.881829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.941613] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 92.947927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.965361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.106322] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.129425] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 93.136967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.152434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.342685] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 93.349156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.359294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.401182] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 93.414878] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.422385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.449893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.654970] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.710487] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.850926] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.995765] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.070329] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.307398] 8021q: adding VLAN 0 to HW filter on device team0 2018/06/03 04:07:29 executing program 1: 2018/06/03 04:07:29 executing program 1: 2018/06/03 04:07:29 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) [ 98.843720] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. [ 98.861178] syz-executor2 uses obsolete (PF_INET,SOCK_PACKET) [ 99.010572] ================================================================== [ 99.017999] BUG: KMSAN: uninit-value in _copy_to_iter+0x45f/0x2800 [ 99.024322] CPU: 0 PID: 6599 Comm: syz-executor6 Not tainted 4.17.0-rc5+ #103 [ 99.031734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 99.041093] Call Trace: [ 99.043702] dump_stack+0x185/0x1d0 [ 99.047346] ? kmsan_internal_check_memory+0x116/0x1e0 [ 99.052630] kmsan_report+0x149/0x260 [ 99.056415] kmsan_internal_check_memory+0x135/0x1e0 [ 99.061498] kmsan_copy_to_user+0x75/0x160 [ 99.065719] ? _copy_to_iter+0x92/0x2800 [ 99.069761] _copy_to_iter+0x45f/0x2800 [ 99.073719] ? finish_wait+0x10a/0x3e0 [ 99.077593] vhost_chr_read_iter+0x7b3/0xc30 [ 99.081979] ? init_wait_entry+0x1a0/0x1a0 [ 99.086209] vhost_net_chr_read_iter+0xf6/0x130 [ 99.090870] ? vhost_net_exit+0x30/0x30 [ 99.094824] do_iter_readv_writev+0x84d/0xa00 [ 99.099463] ? vhost_net_exit+0x30/0x30 [ 99.103432] do_iter_read+0x303/0xd70 [ 99.107214] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 99.112735] do_readv+0x295/0x5f0 [ 99.116188] __x64_sys_readv+0xe1/0x120 [ 99.120148] do_syscall_64+0x152/0x230 [ 99.124023] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 99.129198] RIP: 0033:0x455a09 [ 99.132373] RSP: 002b:00007f5570b09c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 99.140060] RAX: ffffffffffffffda RBX: 00007f5570b0a6d4 RCX: 0000000000455a09 [ 99.147313] RDX: 0000000000000001 RSI: 0000000020000280 RDI: 0000000000000014 [ 99.154568] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 99.161820] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 99.169073] R13: 000000000000056b R14: 00000000006fd2a8 R15: 0000000000000000 [ 99.176329] [ 99.177933] Uninit was created at: [ 99.181456] kmsan_internal_poison_shadow+0xb8/0x1b0 [ 99.186536] kmsan_kmalloc+0x94/0x100 [ 99.190315] __kmalloc+0x141/0x350 [ 99.193836] translate_desc+0xbef/0x1120 [ 99.197876] vhost_update_used_flags+0x469/0x8d0 [ 99.202608] vhost_vq_init_access+0x173/0xa20 [ 99.207086] vhost_net_ioctl+0x2212/0x3450 [ 99.211301] do_vfs_ioctl+0xaf8/0x2410 [ 99.215164] __x64_sys_ioctl+0x280/0x320 [ 99.219203] do_syscall_64+0x152/0x230 [ 99.223077] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 99.228238] [ 99.229849] Bytes 4-7 of 72 are uninitialized [ 99.234318] Memory access starts at ffff880136e43d20 [ 99.239392] ================================================================== [ 99.246726] Disabling lock debugging due to kernel taint [ 99.252255] Kernel panic - not syncing: panic_on_warn set ... [ 99.252255] [ 99.259603] CPU: 0 PID: 6599 Comm: syz-executor6 Tainted: G B 4.17.0-rc5+ #103 [ 99.271707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 99.281370] Call Trace: [ 99.283945] dump_stack+0x185/0x1d0 [ 99.287564] panic+0x39d/0x940 [ 99.290753] ? kmsan_internal_check_memory+0x116/0x1e0 [ 99.296016] kmsan_report+0x260/0x260 [ 99.299814] kmsan_internal_check_memory+0x135/0x1e0 [ 99.304899] kmsan_copy_to_user+0x75/0x160 [ 99.309115] ? _copy_to_iter+0x92/0x2800 [ 99.313157] _copy_to_iter+0x45f/0x2800 [ 99.317110] ? finish_wait+0x10a/0x3e0 [ 99.321107] vhost_chr_read_iter+0x7b3/0xc30 [ 99.325644] ? init_wait_entry+0x1a0/0x1a0 [ 99.329862] vhost_net_chr_read_iter+0xf6/0x130 [ 99.334518] ? vhost_net_exit+0x30/0x30 [ 99.338471] do_iter_readv_writev+0x84d/0xa00 [ 99.342963] ? vhost_net_exit+0x30/0x30 [ 99.346914] do_iter_read+0x303/0xd70 [ 99.350695] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 99.356138] do_readv+0x295/0x5f0 [ 99.359597] __x64_sys_readv+0xe1/0x120 [ 99.363557] do_syscall_64+0x152/0x230 [ 99.367436] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 99.372613] RIP: 0033:0x455a09 [ 99.375786] RSP: 002b:00007f5570b09c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 99.383756] RAX: ffffffffffffffda RBX: 00007f5570b0a6d4 RCX: 0000000000455a09 [ 99.391016] RDX: 0000000000000001 RSI: 0000000020000280 RDI: 0000000000000014 [ 99.398272] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 99.405520] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 99.412813] R13: 000000000000056b R14: 00000000006fd2a8 R15: 0000000000000000 [ 99.420566] Dumping ftrace buffer: [ 99.424100] (ftrace buffer empty) [ 99.427788] Kernel Offset: disabled [ 99.431391] Rebooting in 86400 seconds..