[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 26.565360] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 30.295954] random: sshd: uninitialized urandom read (32 bytes read) [ 30.727782] random: sshd: uninitialized urandom read (32 bytes read) [ 32.030474] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.2' (ECDSA) to the list of known hosts. [ 37.526898] random: sshd: uninitialized urandom read (32 bytes read) 2018/05/31 05:53:48 fuzzer started 2018/05/31 05:53:49 dialing manager at 10.128.0.26:37137 [ 61.439972] can: request_module (can-proto-0) failed. [ 61.450480] can: request_module (can-proto-0) failed. 2018/05/31 05:54:14 kcov=true, comps=false 2018/05/31 05:54:19 executing program 0: 2018/05/31 05:54:19 executing program 1: 2018/05/31 05:54:19 executing program 7: 2018/05/31 05:54:19 executing program 2: 2018/05/31 05:54:19 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000003180), 0xfffffffffffffceb, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739c9d, 0x0, 0x0, 0x35) 2018/05/31 05:54:19 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x20000000012, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='/exe\x00\x00\x00\x00\x00\x00') fcntl$setstatus(r1, 0x4, 0x4000000000046800) io_setup(0x8000000007, &(0x7f0000000040)=0x0) io_submit(r2, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000200), 0xfffffdcc}]) 2018/05/31 05:54:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, [{0x4}]}]}, 0x28}, 0x1}, 0x0) 2018/05/31 05:54:19 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x20000008912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={"7465616d30000000005bfbe605266600", 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@setlink={0x2c, 0x13, 0x811, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_ADDRESS={0xc, 0x1, @empty=[0x3008]}]}, 0x2c}, 0x1}, 0x0) [ 69.163258] IPVS: ftp: loaded support on port[0] = 21 [ 69.200318] IPVS: ftp: loaded support on port[0] = 21 [ 69.209079] IPVS: ftp: loaded support on port[0] = 21 [ 69.220723] IPVS: ftp: loaded support on port[0] = 21 [ 69.225871] IPVS: ftp: loaded support on port[0] = 21 [ 69.243065] IPVS: ftp: loaded support on port[0] = 21 [ 69.255512] IPVS: ftp: loaded support on port[0] = 21 [ 69.294416] IPVS: ftp: loaded support on port[0] = 21 [ 70.791289] ip (4639) used greatest stack depth: 54344 bytes left [ 71.534837] ip (4699) used greatest stack depth: 54040 bytes left [ 72.503563] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.510119] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.543787] device bridge_slave_0 entered promiscuous mode [ 72.579851] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.586342] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.615992] device bridge_slave_0 entered promiscuous mode [ 72.635630] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.642097] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.672105] device bridge_slave_0 entered promiscuous mode [ 72.685945] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.692427] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.711112] device bridge_slave_0 entered promiscuous mode [ 72.724529] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.730969] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.756989] device bridge_slave_0 entered promiscuous mode [ 72.772185] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.778658] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.793460] device bridge_slave_1 entered promiscuous mode [ 72.801194] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.807624] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.823565] device bridge_slave_0 entered promiscuous mode [ 72.836794] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.843227] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.852755] device bridge_slave_0 entered promiscuous mode [ 72.865502] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.871931] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.882329] device bridge_slave_0 entered promiscuous mode [ 72.897269] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.903744] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.919652] device bridge_slave_1 entered promiscuous mode [ 72.935186] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.941604] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.958294] device bridge_slave_1 entered promiscuous mode [ 72.965815] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.972289] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.991996] device bridge_slave_1 entered promiscuous mode [ 73.009659] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 73.023307] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.029738] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.051661] device bridge_slave_1 entered promiscuous mode [ 73.072428] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 73.080258] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.086663] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.104414] device bridge_slave_1 entered promiscuous mode [ 73.123536] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.129988] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.140620] device bridge_slave_1 entered promiscuous mode [ 73.155894] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.162324] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.188138] device bridge_slave_1 entered promiscuous mode [ 73.213613] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 73.222810] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 73.230278] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 73.238514] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 73.248806] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 73.294197] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 73.312561] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 73.419317] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 73.456162] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 73.466429] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 73.475400] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 73.500599] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 73.526329] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 73.598236] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 73.816558] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 73.835613] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 74.067671] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 74.082199] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 74.091917] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 74.103696] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 74.154377] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 74.168122] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 74.184937] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 74.204678] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 74.243745] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 74.284602] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 74.302737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.319321] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 74.328108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.371166] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 74.384436] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 74.397978] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 74.423112] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 74.437947] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 74.528663] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 74.535615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.587171] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 74.594761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.608377] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 74.627570] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 74.635869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.663476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.712512] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 74.719486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.735238] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 74.762841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.781205] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 74.831281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.864896] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 74.872377] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 74.879296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.899334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.926384] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 74.935842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.990708] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 74.998325] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 75.005265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.033479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.180173] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 75.204569] team0: Port device team_slave_0 added [ 75.245190] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 75.253132] team0: Port device team_slave_0 added [ 75.431339] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 75.451787] team0: Port device team_slave_1 added [ 75.462576] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 75.476871] team0: Port device team_slave_1 added [ 75.486979] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 75.500205] team0: Port device team_slave_0 added [ 75.527783] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 75.543510] team0: Port device team_slave_0 added [ 75.577321] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 75.590689] team0: Port device team_slave_0 added [ 75.603929] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 75.615773] team0: Port device team_slave_0 added [ 75.633212] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 75.646131] team0: Port device team_slave_0 added [ 75.671316] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 75.678280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.694198] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.732105] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 75.740807] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 75.753222] team0: Port device team_slave_1 added [ 75.763304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.783753] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.793151] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 75.801223] team0: Port device team_slave_0 added [ 75.810437] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 75.823409] team0: Port device team_slave_1 added [ 75.844661] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 75.858224] team0: Port device team_slave_1 added [ 75.877598] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 75.887147] team0: Port device team_slave_1 added [ 75.902493] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 75.912458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.923891] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.948963] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 75.959736] team0: Port device team_slave_1 added [ 75.974642] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 75.981515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.994086] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.042529] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 76.057131] team0: Port device team_slave_1 added [ 76.064171] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 76.072758] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 76.079705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.093925] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.102634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.117932] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.136059] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 76.143515] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 76.157424] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 76.167313] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 76.186426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.206442] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.231359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.262782] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.281314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.295865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.303770] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.311948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.334525] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 76.347680] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 76.356224] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 76.363247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.372444] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.390935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.405095] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.425713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.444142] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.456360] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 76.464078] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 76.472396] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 76.479996] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 76.492130] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.514436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.548762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.570396] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.585542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.594569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.602516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.610387] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.625233] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 76.633137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.642834] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.663860] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 76.671994] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 76.679617] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 76.703650] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 76.711208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.724004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.755284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.784250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.807176] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.828819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.848727] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.856891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.865966] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 76.875662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.884475] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.910534] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 76.919159] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 76.929496] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 76.942114] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.956257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.975421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.989550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.004545] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.024553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.033909] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 77.041285] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.049603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.068829] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 77.090736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.114100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.137860] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 77.145782] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 77.156334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.194195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.226744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.243101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.271242] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 77.285920] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.321355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.364445] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 77.371850] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.393296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.004005] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.010475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.017292] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.023713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.053656] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 79.060748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.090100] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.096553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.103317] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.109765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.154204] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 79.357367] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.363848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.370611] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.377076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.391011] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 79.403022] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.409473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.416267] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.422666] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.460772] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 79.467274] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.473705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.480446] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.486847] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.494536] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 79.523298] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.529742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.536535] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.542954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.635208] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 79.643309] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.649726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.656497] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.662951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.681433] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 79.716346] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.722799] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.729560] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.735970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.783057] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 80.096530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.104709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.136808] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.160750] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.179770] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.194688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.206971] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.344880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.565431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.691657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.781696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.929243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.960325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.185745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.197870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.218209] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 88.397561] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 88.470313] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 88.608895] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 88.720194] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 88.728259] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 88.895276] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 89.012286] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 89.019608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.037752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.068182] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 89.200566] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 89.206870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.220776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.289322] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 89.295592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.304728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.457097] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 89.463372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.471280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.509108] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 89.515364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.526468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.565078] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 89.573013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.592087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.813374] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.838617] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 89.849793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.860660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.889895] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 89.902283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.926797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.099983] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.208070] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.232597] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.396523] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.441189] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.558318] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.733760] 8021q: adding VLAN 0 to HW filter on device team0 2018/05/31 05:54:45 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x20000000012, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='/exe\x00\x00\x00\x00\x00\x00') fcntl$setstatus(r1, 0x4, 0x4000000000046800) io_setup(0x8000000007, &(0x7f0000000040)=0x0) io_submit(r2, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000200), 0xfffffdcc}]) 2018/05/31 05:54:45 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={&(0x7f0000000480)={0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[]}, 0x1}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c000000140031010000000000000000ff020080000000000000000000000001fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00010000000000000c0008f508000800006deecaa15232c351db063946dc750d9ed27f0c3ea4fceeacae382f7f98f3a30f310ec8e9842b820d9c4c3e7ed24d1a4167259ae43007d685ac2c7f702b7f63807add523f491dccc419c6d70c60f229aec8cb7c48fa2410f2d013593867c2ee87ecd41f6a"], 0x3}, 0x1}, 0x0) [ 95.056322] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.062842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.136210] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.142672] bridge0: port 1(bridge_slave_0) entered forwarding state 2018/05/31 05:54:47 executing program 0: ioprio_set$pid(0x2, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0047fc2f07d82c99240970") clone(0x818c2500, &(0x7f00008da000), &(0x7f00002b7000), &(0x7f0000bd1000), &(0x7f0000286fd1)) 2018/05/31 05:54:47 executing program 2: 2018/05/31 05:54:47 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") sendmsg(r1, &(0x7f0000000340)={&(0x7f00000002c0)=@un=@abs, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000001000000010000001300000000000000"], 0x18}, 0x0) close(r0) connect$unix(r1, &(0x7f0000000180)=@abs={0x1}, 0x6e) 2018/05/31 05:54:47 executing program 4: r0 = socket$inet(0x2, 0x801, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f000064effb)="8907040000", 0x5) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2018/05/31 05:54:47 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x4000000) 2018/05/31 05:54:47 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f00000003c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, 0x0, 0x0, r2) r4 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a}, &(0x7f0000000440)='\x00', 0x1, r3) r5 = add_key$user(&(0x7f0000fc0ffb)='user\x00', &(0x7f0000752ffb)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000000)="b3", 0x1, r3) keyctl$update(0x2, r5, &(0x7f0000000480)="df02754677212dfc3e2acc26fdc3ffa64813da494137e175e9f2780ac5e2a09f43a1fcebf272a5a135de92bf4a9033933824f6e6aa023895113293535d1c0066d20e0f275188b4b4c187e18774fc2227cbb60fc6697f5337726164c8fbe1181e6d50986cd98a5c44ac0ec375deb27eafcf7d06438f252510d87bd91d03e7dc2faed85adcd88ca30e75b1e143a72d94defa187e48b89efbbbcc9b9a9a307353df7a21affce4e9149eb122cbc356cb681365afd979e97b57b596e901864a68679f", 0xc0) keyctl$dh_compute(0x17, &(0x7f0000000200)={r4, r5, r4}, &(0x7f0000000300)=""/5, 0x166, &(0x7f0000c61fc8)={&(0x7f00000002c0)={'crc32c-generic\x00'}}) 2018/05/31 05:54:47 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x2081fc) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) accept4$packet(r2, &(0x7f0000000040), &(0x7f0000005900)=0xfffffffffffffebf, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") rt_sigpending(&(0x7f0000003440), 0x8) 2018/05/31 05:54:47 executing program 5: mq_open(&(0x7f0000000080)='.vboxnet1\x00', 0x0, 0x0, &(0x7f00000000c0)) 2018/05/31 05:54:47 executing program 0: 2018/05/31 05:54:47 executing program 2: 2018/05/31 05:54:47 executing program 5: 2018/05/31 05:54:47 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000380)=0x200000000) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) write$vnet(r0, &(0x7f0000000280)={0x1, {&(0x7f00000003c0)=""/4096, 0x1000, &(0x7f00000013c0)=""/4096, 0x0, 0x2}}, 0x68) 2018/05/31 05:54:47 executing program 7: 2018/05/31 05:54:47 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") sendmsg(r1, &(0x7f0000000340)={&(0x7f00000002c0)=@un=@abs, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000001000000010000001300000000000000"], 0x18}, 0x0) close(r0) connect$unix(r1, &(0x7f0000000180)=@abs={0x1}, 0x6e) 2018/05/31 05:54:47 executing program 4: 2018/05/31 05:54:47 executing program 2: 2018/05/31 05:54:47 executing program 5: 2018/05/31 05:54:47 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f00000003c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, 0x0, 0x0, r2) r4 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a}, &(0x7f0000000440)='\x00', 0x1, r3) r5 = add_key$user(&(0x7f0000fc0ffb)='user\x00', &(0x7f0000752ffb)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000000)="b3", 0x1, r3) keyctl$update(0x2, r5, &(0x7f0000000480)="df02754677212dfc3e2acc26fdc3ffa64813da494137e175e9f2780ac5e2a09f43a1fcebf272a5a135de92bf4a9033933824f6e6aa023895113293535d1c0066d20e0f275188b4b4c187e18774fc2227cbb60fc6697f5337726164c8fbe1181e6d50986cd98a5c44ac0ec375deb27eafcf7d06438f252510d87bd91d03e7dc2faed85adcd88ca30e75b1e143a72d94defa187e48b89efbbbcc9b9a9a307353df7a21affce4e9149eb122cbc356cb681365afd979e97b57b596e901864a68679f", 0xc0) keyctl$dh_compute(0x17, &(0x7f0000000200)={r4, r5, r4}, &(0x7f0000000300)=""/5, 0x166, &(0x7f0000c61fc8)={&(0x7f00000002c0)={'crc32c-generic\x00'}}) 2018/05/31 05:54:47 executing program 0: 2018/05/31 05:54:47 executing program 5: 2018/05/31 05:54:47 executing program 0: 2018/05/31 05:54:47 executing program 7: 2018/05/31 05:54:47 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") sendmsg(r1, &(0x7f0000000340)={&(0x7f00000002c0)=@un=@abs, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000001000000010000001300000000000000"], 0x18}, 0x0) close(r0) connect$unix(r1, &(0x7f0000000180)=@abs={0x1}, 0x6e) 2018/05/31 05:54:47 executing program 2: 2018/05/31 05:54:47 executing program 4: 2018/05/31 05:54:47 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f00000003c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, 0x0, 0x0, r2) r4 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a}, &(0x7f0000000440)='\x00', 0x1, r3) r5 = add_key$user(&(0x7f0000fc0ffb)='user\x00', &(0x7f0000752ffb)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000000)="b3", 0x1, r3) keyctl$update(0x2, r5, &(0x7f0000000480)="df02754677212dfc3e2acc26fdc3ffa64813da494137e175e9f2780ac5e2a09f43a1fcebf272a5a135de92bf4a9033933824f6e6aa023895113293535d1c0066d20e0f275188b4b4c187e18774fc2227cbb60fc6697f5337726164c8fbe1181e6d50986cd98a5c44ac0ec375deb27eafcf7d06438f252510d87bd91d03e7dc2faed85adcd88ca30e75b1e143a72d94defa187e48b89efbbbcc9b9a9a307353df7a21affce4e9149eb122cbc356cb681365afd979e97b57b596e901864a68679f", 0xc0) keyctl$dh_compute(0x17, &(0x7f0000000200)={r4, r5, r4}, &(0x7f0000000300)=""/5, 0x166, &(0x7f0000c61fc8)={&(0x7f00000002c0)={'crc32c-generic\x00'}}) 2018/05/31 05:54:47 executing program 5: [ 97.380424] ================================================================== [ 97.387827] BUG: KMSAN: uninit-value in _copy_to_iter+0x45f/0x2800 [ 97.394134] CPU: 1 PID: 6627 Comm: syz-executor6 Not tainted 4.17.0-rc5+ #103 [ 97.401398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 97.410733] Call Trace: [ 97.413301] dump_stack+0x185/0x1d0 [ 97.416914] ? kmsan_internal_check_memory+0x116/0x1e0 [ 97.422183] kmsan_report+0x149/0x260 [ 97.425972] kmsan_internal_check_memory+0x135/0x1e0 [ 97.431060] kmsan_copy_to_user+0x75/0x160 [ 97.435273] ? _copy_to_iter+0x92/0x2800 [ 97.439314] _copy_to_iter+0x45f/0x2800 [ 97.443267] ? finish_wait+0x10a/0x3e0 [ 97.447139] vhost_chr_read_iter+0x7b3/0xc30 [ 97.451524] ? init_wait_entry+0x1a0/0x1a0 [ 97.455738] vhost_net_chr_read_iter+0xf6/0x130 [ 97.460383] ? vhost_net_exit+0x30/0x30 [ 97.464334] do_iter_readv_writev+0x84d/0xa00 [ 97.468808] ? vhost_net_exit+0x30/0x30 [ 97.472760] do_iter_read+0x303/0xd70 [ 97.476538] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 97.481967] do_readv+0x295/0x5f0 [ 97.485403] __x64_sys_readv+0xe1/0x120 [ 97.489364] do_syscall_64+0x152/0x230 [ 97.493237] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 97.498412] RIP: 0033:0x455a09 [ 97.501585] RSP: 002b:00007f33fe87ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 97.509272] RAX: ffffffffffffffda RBX: 00007f33fe87f6d4 RCX: 0000000000455a09 [ 97.516520] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000014 [ 97.523769] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 97.531022] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 97.538279] R13: 000000000000056b R14: 00000000006fd2a8 R15: 0000000000000000 [ 97.545529] [ 97.547134] Uninit was created at: [ 97.550664] kmsan_internal_poison_shadow+0xb8/0x1b0 [ 97.555748] kmsan_kmalloc+0x94/0x100 [ 97.559528] __kmalloc+0x141/0x350 [ 97.563056] translate_desc+0xbef/0x1120 [ 97.567098] vhost_update_used_flags+0x469/0x8d0 [ 97.571836] vhost_vq_init_access+0x173/0xa20 [ 97.576313] vhost_net_ioctl+0x2212/0x3450 [ 97.580530] do_vfs_ioctl+0xaf8/0x2410 [ 97.584394] __x64_sys_ioctl+0x280/0x320 [ 97.588436] do_syscall_64+0x152/0x230 [ 97.592307] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 97.597466] [ 97.599073] Bytes 4-7 of 72 are uninitialized [ 97.603541] Memory access starts at ffff880138e36de0 [ 97.608615] ================================================================== [ 97.615946] Disabling lock debugging due to kernel taint [ 97.621372] Kernel panic - not syncing: panic_on_warn set ... [ 97.621372] [ 97.628720] CPU: 1 PID: 6627 Comm: syz-executor6 Tainted: G B 4.17.0-rc5+ #103 [ 97.637357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 97.646691] Call Trace: [ 97.649260] dump_stack+0x185/0x1d0 [ 97.652869] panic+0x39d/0x940 [ 97.656063] ? kmsan_internal_check_memory+0x116/0x1e0 [ 97.661332] kmsan_report+0x260/0x260 [ 97.665129] kmsan_internal_check_memory+0x135/0x1e0 [ 97.670216] kmsan_copy_to_user+0x75/0x160 [ 97.674433] ? _copy_to_iter+0x92/0x2800 [ 97.678474] _copy_to_iter+0x45f/0x2800 [ 97.682431] ? finish_wait+0x10a/0x3e0 [ 97.686309] vhost_chr_read_iter+0x7b3/0xc30 [ 97.690697] ? init_wait_entry+0x1a0/0x1a0 [ 97.694920] vhost_net_chr_read_iter+0xf6/0x130 [ 97.699567] ? vhost_net_exit+0x30/0x30 [ 97.703529] do_iter_readv_writev+0x84d/0xa00 [ 97.708013] ? vhost_net_exit+0x30/0x30 [ 97.711977] do_iter_read+0x303/0xd70 [ 97.715758] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 97.721192] do_readv+0x295/0x5f0 [ 97.724634] __x64_sys_readv+0xe1/0x120 [ 97.728590] do_syscall_64+0x152/0x230 [ 97.732467] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 97.737634] RIP: 0033:0x455a09 [ 97.740803] RSP: 002b:00007f33fe87ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 97.748491] RAX: ffffffffffffffda RBX: 00007f33fe87f6d4 RCX: 0000000000455a09 [ 97.755740] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000014 [ 97.762996] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 97.770715] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 97.777965] R13: 000000000000056b R14: 00000000006fd2a8 R15: 0000000000000000 [ 97.785697] Dumping ftrace buffer: [ 97.789213] (ftrace buffer empty) [ 97.792894] Kernel Offset: disabled [ 97.796497] Rebooting in 86400 seconds..