[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 28.753648] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 33.478510] random: sshd: uninitialized urandom read (32 bytes read) [ 33.817843] random: sshd: uninitialized urandom read (32 bytes read) [ 35.103651] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.23' (ECDSA) to the list of known hosts. [ 40.577460] random: sshd: uninitialized urandom read (32 bytes read) 2018/06/05 04:08:29 fuzzer started 2018/06/05 04:08:30 dialing manager at 10.128.0.26:45299 [ 64.021997] can: request_module (can-proto-0) failed. [ 64.032897] can: request_module (can-proto-0) failed. 2018/06/05 04:08:54 kcov=true, comps=false 2018/06/05 04:09:00 executing program 0: 2018/06/05 04:09:00 executing program 2: 2018/06/05 04:09:00 executing program 7: syz_emit_ethernet(0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0086dd607779440018000000000000000000000000000000000000fe8000000000000000000000000000bb0101000000000000c200000000000100810090780000000040bbef"], &(0x7f0000000140)) 2018/06/05 04:09:00 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="76f12c0aad76590ba4fc25cd1163b5670700000001"]) ioctl(r0, 0x8916, &(0x7f0000000000)) ftruncate(r0, 0x3f) 2018/06/05 04:09:00 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000380)=0x200000000) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r2) syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) 2018/06/05 04:09:00 executing program 4: syz_emit_ethernet(0x1, &(0x7f0000000b80)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60725ea1001011000000000000000000000000000000000000000000000000000000ffffac141400000000000401907800b33dbb0071d23fbab55d460944b934a5c06483f8565fa0e8967173f2a1951f74d4f7698e894cb6cea5e47301a9c82801ac8c6ea1e2ec6ef0f27cdb1f7344f284b2c95c716b20902b1f6cef56944e541194384a37b5db6baeee2c505b7b1fa4ef492483e3603691b5af0783f2a5efef369251528ae76f60fd6b91d91082a3c33ff8f30e935526b779d30fbc87fab29bb990a1bba54901b736d8096dffa86f7fe009e0faea930336e91016821a11da8ee3"], &(0x7f0000000040)) 2018/06/05 04:09:00 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000200)=0x78, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @rand_addr}, 0x10) ioctl$void(0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xffffffffffffffbc, 0x20000000, &(0x7f0000000140)={0x2, 0x1000004e23, @loopback=0x7f000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfd8af) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000002440)=ANY=[], &(0x7f00000001c0)) sendto$inet(r0, &(0x7f00000000c0)='S', 0x1, 0x0, &(0x7f0000000080)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2018/06/05 04:09:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000200)={0x10}, 0x394, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x9}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [], 0xaa}}]}, 0x37d}, 0x1}, 0x0) [ 72.601988] IPVS: ftp: loaded support on port[0] = 21 [ 72.678734] IPVS: ftp: loaded support on port[0] = 21 [ 72.699964] IPVS: ftp: loaded support on port[0] = 21 [ 72.713164] IPVS: ftp: loaded support on port[0] = 21 [ 72.719099] IPVS: ftp: loaded support on port[0] = 21 [ 72.742761] IPVS: ftp: loaded support on port[0] = 21 [ 72.742794] IPVS: ftp: loaded support on port[0] = 21 [ 72.762273] IPVS: ftp: loaded support on port[0] = 21 [ 74.377124] ip (4683) used greatest stack depth: 54344 bytes left [ 74.571206] ip (4696) used greatest stack depth: 54280 bytes left [ 74.934216] ip (4725) used greatest stack depth: 54040 bytes left [ 75.966525] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.973007] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.012681] device bridge_slave_0 entered promiscuous mode [ 76.099292] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.105757] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.146164] device bridge_slave_0 entered promiscuous mode [ 76.160429] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.166917] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.190133] device bridge_slave_0 entered promiscuous mode [ 76.207911] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.214334] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.228598] device bridge_slave_0 entered promiscuous mode [ 76.242384] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.248840] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.264346] device bridge_slave_0 entered promiscuous mode [ 76.272802] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.279217] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.301545] device bridge_slave_0 entered promiscuous mode [ 76.318005] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.324453] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.348582] device bridge_slave_1 entered promiscuous mode [ 76.362906] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.369366] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.377434] device bridge_slave_0 entered promiscuous mode [ 76.386349] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.392796] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.417014] device bridge_slave_1 entered promiscuous mode [ 76.446876] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.453422] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.487085] device bridge_slave_1 entered promiscuous mode [ 76.501145] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.507586] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.525982] device bridge_slave_1 entered promiscuous mode [ 76.534113] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.540518] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.556626] device bridge_slave_1 entered promiscuous mode [ 76.573675] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.580105] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.590885] device bridge_slave_1 entered promiscuous mode [ 76.604562] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.611079] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.634506] device bridge_slave_0 entered promiscuous mode [ 76.652126] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.658569] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.667437] device bridge_slave_1 entered promiscuous mode [ 76.675961] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 76.687502] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 76.702749] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 76.710976] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 76.737996] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 76.754567] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 76.839575] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 76.849696] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.856136] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.894500] device bridge_slave_1 entered promiscuous mode [ 76.913959] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 76.921632] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 76.933354] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 76.947415] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 76.963701] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 76.978599] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 77.110172] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 77.182011] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 77.246381] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 77.427882] ip (4905) used greatest stack depth: 53768 bytes left [ 77.457341] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 77.485807] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 77.572423] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 77.602289] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 77.620484] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 77.631633] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 77.673783] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 77.706934] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 77.776412] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 77.827449] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 77.845619] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 77.860767] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 77.915701] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 77.957922] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 77.997431] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 78.004410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.052506] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 78.059493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.078197] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 78.086124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.106977] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 78.113936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.134093] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 78.145646] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 78.152646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.178510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.213378] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 78.226891] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 78.240970] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 78.247861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.279860] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 78.286822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.301688] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 78.308991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.391301] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 78.398263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.451348] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 78.458313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.485734] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 78.494501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.673710] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 78.680703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.708444] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 78.715737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.731509] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 78.740452] team0: Port device team_slave_0 added [ 78.804652] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 78.827799] team0: Port device team_slave_0 added [ 78.920213] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 78.952787] team0: Port device team_slave_0 added [ 78.972883] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 78.988788] team0: Port device team_slave_1 added [ 79.015293] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 79.031148] team0: Port device team_slave_0 added [ 79.038387] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 79.055259] team0: Port device team_slave_0 added [ 79.073103] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 79.089423] team0: Port device team_slave_1 added [ 79.097149] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 79.116184] team0: Port device team_slave_0 added [ 79.132158] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 79.158660] team0: Port device team_slave_1 added [ 79.195673] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 79.204905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.215287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.251315] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 79.265115] team0: Port device team_slave_1 added [ 79.294417] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 79.311831] team0: Port device team_slave_1 added [ 79.328066] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 79.349350] team0: Port device team_slave_1 added [ 79.367486] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 79.374458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.386728] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.401377] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 79.414445] team0: Port device team_slave_0 added [ 79.424262] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 79.434267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.460411] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.481609] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 79.491774] team0: Port device team_slave_0 added [ 79.497297] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 79.504253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.523315] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.546939] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 79.554308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.566777] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.584690] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 79.592363] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 79.607283] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 79.616699] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 79.650122] team0: Port device team_slave_1 added [ 79.670453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.679332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.702426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.725649] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.737620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.745862] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.757606] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 79.764603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.772997] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.784919] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 79.791840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.799793] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.826713] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 79.833751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.843216] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.863921] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 79.871448] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 79.888219] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 79.896255] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 79.904416] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 79.918864] team0: Port device team_slave_1 added [ 79.948295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.963377] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.002588] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.033113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.055707] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.064089] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.072227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.079971] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.088244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.109375] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 80.123913] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.132943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.141761] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 80.149168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.157565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.167467] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 80.176302] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 80.187959] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 80.197679] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 80.205746] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 80.221394] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 80.231481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.250466] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.300443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.335495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.356481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.374509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.382417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.390662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.398424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.406353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.413815] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.421984] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.430572] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 80.440534] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.449241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.475923] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 80.484753] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 80.494586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.526271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.551641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.580512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.596435] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 80.606342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.629632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.644722] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 80.652309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.664966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.698515] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 80.707255] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.739125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.813433] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 80.821135] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.836591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.933649] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 80.941561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.955523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.512395] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.518844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.525628] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.532069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.549534] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 82.557240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.581202] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.587612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.594366] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.600780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.609123] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 82.662454] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.668913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.675681] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.682095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.771819] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 82.808802] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.815244] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.821986] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.828407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.884818] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 83.096650] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.103100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.109911] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.116335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.148143] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 83.154696] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.161129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.167888] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.174295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.182540] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 83.222012] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.228485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.235279] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.241696] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.314912] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 83.490073] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.496522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.503340] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.509771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.532412] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 83.615326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.627843] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.668273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.705783] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.726294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.741751] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.749926] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.960265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.067427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.237369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.323662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.380221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.519185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.566889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.802585] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 91.864515] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 91.961139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.974771] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 92.116010] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 92.245653] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 92.294220] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 92.343976] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 92.618151] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 92.624452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.635783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.655927] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 92.671184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.699082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.741856] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 92.829439] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 92.835742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.848878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.944958] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 92.951248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.959096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.003715] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 93.010262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.021689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.092754] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 93.099705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.116085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.170519] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 93.176816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.190811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.438189] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.536476] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.581005] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 93.587358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.595992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.720241] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.762184] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.820871] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.996355] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.056522] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.374896] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.638075] ================================================================== [ 99.645479] BUG: KMSAN: uninit-value in _copy_to_iter+0x45f/0x2800 [ 99.651782] CPU: 1 PID: 6608 Comm: syz-executor5 Not tainted 4.17.0-rc5+ #103 [ 99.659032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 99.668362] Call Trace: [ 99.670943] dump_stack+0x185/0x1d0 [ 99.674558] ? kmsan_internal_check_memory+0x116/0x1e0 [ 99.679824] kmsan_report+0x149/0x260 [ 99.683625] kmsan_internal_check_memory+0x135/0x1e0 [ 99.688721] kmsan_copy_to_user+0x75/0x160 [ 99.692945] ? _copy_to_iter+0x92/0x2800 [ 99.696985] _copy_to_iter+0x45f/0x2800 [ 99.700939] ? finish_wait+0x10a/0x3e0 [ 99.704814] vhost_chr_read_iter+0x7b3/0xc30 [ 99.709201] ? init_wait_entry+0x1a0/0x1a0 [ 99.713419] vhost_net_chr_read_iter+0xf6/0x130 [ 99.718067] ? vhost_net_exit+0x30/0x30 [ 99.722021] do_iter_readv_writev+0x84d/0xa00 [ 99.726500] ? vhost_net_exit+0x30/0x30 [ 99.730454] do_iter_read+0x303/0xd70 [ 99.734243] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 99.739685] do_readv+0x295/0x5f0 [ 99.743143] __x64_sys_readv+0xe1/0x120 [ 99.747109] do_syscall_64+0x152/0x230 [ 99.750982] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 99.756153] RIP: 0033:0x455a09 [ 99.759327] RSP: 002b:00007ff0eb6c0c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 99.767021] RAX: ffffffffffffffda RBX: 00007ff0eb6c16d4 RCX: 0000000000455a09 [ 99.774278] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000014 [ 99.781528] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 99.788777] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 99.796033] R13: 000000000000056b R14: 00000000006fd2a8 R15: 0000000000000000 [ 99.803291] [ 99.804897] Uninit was created at: [ 99.808429] kmsan_internal_poison_shadow+0xb8/0x1b0 [ 99.813517] kmsan_kmalloc+0x94/0x100 [ 99.817300] __kmalloc+0x141/0x350 [ 99.820823] translate_desc+0xbef/0x1120 [ 99.824871] vhost_update_used_flags+0x469/0x8d0 [ 99.829611] vhost_vq_init_access+0x173/0xa20 [ 99.834090] vhost_net_ioctl+0x2212/0x3450 [ 99.838306] do_vfs_ioctl+0xaf8/0x2410 [ 99.842175] __x64_sys_ioctl+0x280/0x320 [ 99.846217] do_syscall_64+0x152/0x230 [ 99.850087] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 99.855250] [ 99.856857] Bytes 4-7 of 72 are uninitialized [ 99.861328] Memory access starts at ffff88013bc14ae0 [ 99.866406] ================================================================== [ 99.873740] Disabling lock debugging due to kernel taint [ 99.879166] Kernel panic - not syncing: panic_on_warn set ... [ 99.879166] [ 99.886513] CPU: 1 PID: 6608 Comm: syz-executor5 Tainted: G B 4.17.0-rc5+ #103 [ 99.895155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 99.904487] Call Trace: [ 99.907061] dump_stack+0x185/0x1d0 [ 99.910673] panic+0x39d/0x940 [ 99.913862] ? kmsan_internal_check_memory+0x116/0x1e0 [ 99.919161] kmsan_report+0x260/0x260 [ 99.922951] kmsan_internal_check_memory+0x135/0x1e0 [ 99.928048] kmsan_copy_to_user+0x75/0x160 [ 99.932266] ? _copy_to_iter+0x92/0x2800 [ 99.936309] _copy_to_iter+0x45f/0x2800 [ 99.940264] ? finish_wait+0x10a/0x3e0 [ 99.944146] vhost_chr_read_iter+0x7b3/0xc30 [ 99.948536] ? init_wait_entry+0x1a0/0x1a0 [ 99.952758] vhost_net_chr_read_iter+0xf6/0x130 [ 99.957413] ? vhost_net_exit+0x30/0x30 [ 99.961374] do_iter_readv_writev+0x84d/0xa00 [ 99.965854] ? vhost_net_exit+0x30/0x30 [ 99.969813] do_iter_read+0x303/0xd70 [ 99.973600] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 99.979042] do_readv+0x295/0x5f0 [ 99.982489] __x64_sys_readv+0xe1/0x120 [ 99.986447] do_syscall_64+0x152/0x230 [ 99.990320] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 99.995492] RIP: 0033:0x455a09 [ 99.998665] RSP: 002b:00007ff0eb6c0c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 100.006355] RAX: ffffffffffffffda RBX: 00007ff0eb6c16d4 RCX: 0000000000455a09 [ 100.013607] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000014 [ 100.020858] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 100.028110] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 100.035363] R13: 000000000000056b R14: 00000000006fd2a8 R15: 0000000000000000 [ 100.043091] Dumping ftrace buffer: [ 100.046614] (ftrace buffer empty) [ 100.050301] Kernel Offset: disabled [ 100.053904] Rebooting in 86400 seconds..