[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 27.906883] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 32.731098] random: sshd: uninitialized urandom read (32 bytes read) [ 33.118760] random: sshd: uninitialized urandom read (32 bytes read) [ 34.459406] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.8' (ECDSA) to the list of known hosts. [ 39.994500] random: sshd: uninitialized urandom read (32 bytes read) 2018/06/10 03:02:43 fuzzer started [ 41.547839] random: cc1: uninitialized urandom read (8 bytes read) 2018/06/10 03:02:45 dialing manager at 10.128.0.26:42821 [ 66.092203] can: request_module (can-proto-0) failed. [ 66.102780] can: request_module (can-proto-0) failed. 2018/06/10 03:03:11 kcov=true, comps=false 03:03:17 executing program 0: 03:03:17 executing program 1: syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2f, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 03:03:17 executing program 7: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) ioctl$sock_proto_private(r0, 0x89e1, &(0x7f0000000040)) 03:03:17 executing program 2: socket$inet6(0xa, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000040)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000000)) 03:03:17 executing program 4: r0 = socket$inet(0x2, 0x80006, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00', 0x20, 0x2, 0x318, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000900], 0x0, &(0x7f00000005c0), &(0x7f0000000900)=ANY=[@ANYBLOB="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"]}, 0x390) 03:03:17 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="02090009020000000001000000000000"], 0x10}, 0x1}, 0x0) 03:03:17 executing program 3: r0 = socket$inet6(0xa, 0x100000002, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}, 0x1c) 03:03:17 executing program 6: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x60000000) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000140)={'security\x00'}, &(0x7f0000000000)=0x54) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0)=0x6, 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x1f0000, 0x1, 0x0, 0x4, 0x1}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x5c) [ 74.956209] IPVS: ftp: loaded support on port[0] = 21 [ 75.046703] IPVS: ftp: loaded support on port[0] = 21 [ 75.049379] IPVS: ftp: loaded support on port[0] = 21 [ 75.069945] IPVS: ftp: loaded support on port[0] = 21 [ 75.079535] IPVS: ftp: loaded support on port[0] = 21 [ 75.097640] IPVS: ftp: loaded support on port[0] = 21 [ 75.109465] IPVS: ftp: loaded support on port[0] = 21 [ 75.111894] IPVS: ftp: loaded support on port[0] = 21 [ 76.802363] ip (4655) used greatest stack depth: 54424 bytes left [ 77.888713] ip (4749) used greatest stack depth: 54328 bytes left [ 78.039223] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.045660] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.085806] device bridge_slave_0 entered promiscuous mode [ 78.230802] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.237272] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.285153] device bridge_slave_1 entered promiscuous mode [ 78.347476] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.353913] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.374846] device bridge_slave_0 entered promiscuous mode [ 78.397946] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.404397] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.427014] device bridge_slave_0 entered promiscuous mode [ 78.460673] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.467133] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.497125] device bridge_slave_0 entered promiscuous mode [ 78.516017] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.522522] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.551016] device bridge_slave_0 entered promiscuous mode [ 78.569533] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 78.581931] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.588363] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.607473] device bridge_slave_1 entered promiscuous mode [ 78.614821] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.621258] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.631882] device bridge_slave_0 entered promiscuous mode [ 78.669476] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.675980] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.689493] device bridge_slave_0 entered promiscuous mode [ 78.700277] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.706730] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.715938] device bridge_slave_1 entered promiscuous mode [ 78.728458] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.734891] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.751355] device bridge_slave_0 entered promiscuous mode [ 78.770224] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.776652] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.797980] device bridge_slave_1 entered promiscuous mode [ 78.806727] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 78.824704] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.831115] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.862954] device bridge_slave_1 entered promiscuous mode [ 78.876603] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.883013] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.899178] device bridge_slave_1 entered promiscuous mode [ 78.907417] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 78.918222] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 78.929147] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.935624] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.960662] device bridge_slave_1 entered promiscuous mode [ 78.987857] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 78.996471] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 79.031077] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.037583] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.073185] device bridge_slave_1 entered promiscuous mode [ 79.092956] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 79.108753] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 79.121505] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 79.169912] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 79.181233] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 79.285156] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 79.319144] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 79.326777] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 79.396505] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 79.405193] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 79.537463] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 79.590422] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 79.609917] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 79.740803] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 79.818454] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 79.827869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.861676] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 79.877305] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 79.892883] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 79.927718] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 79.956997] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 79.997741] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 80.068525] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 80.114197] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 80.126813] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 80.133765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.161564] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 80.183928] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 80.219599] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 80.245693] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 80.252645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.294106] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 80.301105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.331814] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 80.338820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.363915] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 80.370873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.403561] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 80.428326] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 80.435278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.479388] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 80.495869] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 80.502827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.514127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.555388] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 80.564210] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 80.571221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.602734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.648685] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 80.655858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.676231] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 80.690126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.711584] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 80.718503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.872835] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 80.881419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.896587] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 80.925759] team0: Port device team_slave_0 added [ 80.978802] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 80.994282] team0: Port device team_slave_0 added [ 81.093465] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 81.113825] team0: Port device team_slave_1 added [ 81.158500] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 81.180350] team0: Port device team_slave_0 added [ 81.206384] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 81.219644] team0: Port device team_slave_1 added [ 81.230261] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 81.243258] team0: Port device team_slave_0 added [ 81.260010] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 81.275345] team0: Port device team_slave_0 added [ 81.327935] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 81.349588] team0: Port device team_slave_0 added [ 81.366192] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 81.373300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.384349] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.424758] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 81.437318] team0: Port device team_slave_1 added [ 81.457495] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 81.479143] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 81.501658] team0: Port device team_slave_1 added [ 81.511812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.530793] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.553596] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 81.568935] team0: Port device team_slave_1 added [ 81.578017] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 81.586748] team0: Port device team_slave_1 added [ 81.593659] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 81.610683] team0: Port device team_slave_0 added [ 81.616584] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 81.643974] team0: Port device team_slave_0 added [ 81.651581] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 81.661254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.678446] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.696568] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 81.714912] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 81.722146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.733760] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.757196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.772115] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.793492] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 81.801094] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 81.809521] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 81.823318] team0: Port device team_slave_1 added [ 81.832725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.847393] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.875297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.890353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.905360] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 81.915316] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 81.923870] team0: Port device team_slave_1 added [ 81.933773] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 81.946719] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 81.961380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.983785] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.007379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.023840] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.038007] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.046589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.060162] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 82.067411] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 82.079882] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 82.101990] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 82.119122] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 82.126584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.138846] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.176691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.202249] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.213204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.222017] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.231326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.239595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.247478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.255659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.265339] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 82.274202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.282341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.291886] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 82.299853] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.310430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.331805] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 82.340879] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 82.350055] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 82.365984] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.378960] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.401946] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.431365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.452697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.471351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.487183] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 82.494716] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.503113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.531273] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 82.542712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.559404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.568524] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 82.576136] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 82.585859] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 82.596979] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 82.610239] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 82.622265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.641126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.676089] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.711248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.734576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.755798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.764992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.772991] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.781321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.789616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.816884] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 82.828582] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.851124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.877098] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 82.884802] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.905283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.926316] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 82.935501] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 82.950997] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.970472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.005904] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.023008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.132112] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 83.139537] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.152349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.169897] ip (5184) used greatest stack depth: 54120 bytes left [ 84.478559] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.485084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.491888] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.498331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.545989] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 84.552533] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.940349] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.946803] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.953596] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.959996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.998645] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 85.012280] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.018688] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.025411] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.031790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.040012] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 85.064812] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.071233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.078008] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.084433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.095461] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 85.107786] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.114209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.120994] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.127417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.189410] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 85.250013] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.256498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.263266] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.269688] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.304952] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 85.312953] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.319375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.326172] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.332579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.346187] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 85.576168] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.582613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.589394] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.595796] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.642596] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 85.649752] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.660746] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.675568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.683068] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.691641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.699996] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.707824] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.625836] ip (5632) used greatest stack depth: 54096 bytes left [ 92.535175] ================================================================== [ 92.542578] BUG: KMSAN: uninit-value in get_page_from_freelist+0x5f24/0xb740 [ 92.549764] CPU: 0 PID: 5887 Comm: syz-executor7 Not tainted 4.17.0+ #5 [ 92.556505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 92.565854] Call Trace: [ 92.568443] dump_stack+0x185/0x1d0 [ 92.572066] kmsan_report+0x188/0x2a0 [ 92.575870] __msan_warning_32+0x70/0xc0 [ 92.579931] get_page_from_freelist+0x5f24/0xb740 [ 92.584777] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 92.590222] ? __save_stack_trace+0x90d/0xb00 [ 92.594720] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 92.600080] ? __list_add_valid+0xb8/0x450 [ 92.604312] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 92.609760] ? __list_add_valid+0xb8/0x450 [ 92.613996] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 92.619444] ? __free_one_page+0x15a3/0x1800 [ 92.623870] __alloc_pages_nodemask+0x792/0x5cc0 [ 92.628629] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 92.634085] ? kmsan_set_origin_inline+0x6b/0x120 [ 92.638923] ? __msan_poison_alloca+0x15c/0x1d0 [ 92.643589] ? kmsan_set_origin_inline+0x6b/0x120 [ 92.648430] alloc_pages_current+0x6b1/0x970 [ 92.652840] __get_free_pages+0x2d/0xc0 [ 92.656807] unmap_page_range+0x26d2/0x3be0 [ 92.661143] unmap_single_vma+0x445/0x5e0 [ 92.665302] unmap_vmas+0x1f4/0x360 [ 92.668926] exit_mmap+0x4d7/0x980 [ 92.672468] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 92.677830] ? uprobe_clear_state+0x1b0/0x270 [ 92.682318] ? __mmput+0x3e/0x600 [ 92.685771] __mmput+0x158/0x600 [ 92.689130] ? mmput+0x53/0xf0 [ 92.692326] mmput+0xab/0xf0 [ 92.695341] flush_old_exec+0x1ace/0x2150 [ 92.699493] load_elf_binary+0x139f/0x8fe0 [ 92.703733] ? kmsan_set_origin_inline+0x6b/0x120 [ 92.708574] ? __msan_poison_alloca+0x15c/0x1d0 [ 92.713240] ? kmsan_set_origin_inline+0x6b/0x120 [ 92.718081] ? __msan_poison_alloca+0x15c/0x1d0 [ 92.722745] ? search_binary_handler+0x231/0xac0 [ 92.727496] ? load_elf_binary+0x4c31/0x8fe0 [ 92.731902] ? try_module_get+0x61/0x3d0 [ 92.735961] ? search_binary_handler+0x231/0xac0 [ 92.740708] ? search_binary_handler+0x231/0xac0 [ 92.745460] ? try_module_get+0x61/0x3d0 [ 92.749128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.749513] ? search_binary_handler+0x231/0xac0 [ 92.749536] ? search_binary_handler+0x347/0xac0 [ 92.764881] ? load_script+0xcd0/0xcd0 [ 92.768767] search_binary_handler+0x2f4/0xac0 [ 92.773351] do_execveat_common+0x22e4/0x2db0 [ 92.777854] __x64_sys_execve+0x127/0x180 [ 92.782003] ? set_binfmt+0x1b0/0x1b0 [ 92.785800] do_syscall_64+0x15b/0x230 [ 92.789685] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 92.794866] RIP: 0033:0x454387 [ 92.798044] RSP: 002b:0000000000a3fac8 EFLAGS: 00000207 ORIG_RAX: 000000000000003b [ 92.805746] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000454387 [ 92.813009] RDX: 00007ffc62a61968 RSI: 0000000000a3fb00 RDI: 00000000004d50a8 [ 92.820271] RBP: 0000000000a3fc80 R08: 0000000000000000 R09: 000000000000001a [ 92.827535] R10: 0000000000000008 R11: 0000000000000207 R12: 0000000000a3fec8 [ 92.834796] R13: 0000000000a3fe28 R14: 0000000000000000 R15: 0000000000000000 [ 92.842059] [ 92.843674] Uninit was stored to memory at: [ 92.847998] kmsan_internal_chain_origin+0x12b/0x210 [ 92.853099] __msan_chain_origin+0x69/0xc0 [ 92.857331] free_unref_page_commit+0x4bc/0x4d0 [ 92.861994] free_pages+0x290/0x320 [ 92.865612] tlb_finish_mmu+0x3f7/0x5c0 [ 92.869578] exit_mmap+0x539/0x980 [ 92.873110] __mmput+0x158/0x600 [ 92.876470] mmput+0xab/0xf0 [ 92.879487] exit_mm+0x6ed/0x7a0 [ 92.882847] do_exit+0xc12/0x3930 [ 92.886299] do_group_exit+0x1a0/0x360 [ 92.890182] __do_sys_exit_group+0x21/0x30 [ 92.894412] __se_sys_exit_group+0x14/0x20 [ 92.898645] __x64_sys_exit_group+0x4c/0x50 [ 92.902962] do_syscall_64+0x15b/0x230 [ 92.906846] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 92.912030] Local variable description: ----tlb@exit_mmap [ 92.917553] Variable was created at: [ 92.921263] exit_mmap+0x47/0x980 [ 92.924731] __mmput+0x158/0x600 [ 92.928084] ================================================================== [ 92.935428] Disabling lock debugging due to kernel taint [ 92.940867] Kernel panic - not syncing: panic_on_warn set ... [ 92.940867] [ 92.948231] CPU: 0 PID: 5887 Comm: syz-executor7 Tainted: G B 4.17.0+ #5 [ 92.956361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 92.965703] Call Trace: [ 92.968283] dump_stack+0x185/0x1d0 [ 92.971906] panic+0x3d0/0x990 [ 92.975104] kmsan_report+0x29e/0x2a0 [ 92.978900] __msan_warning_32+0x70/0xc0 [ 92.982962] get_page_from_freelist+0x5f24/0xb740 [ 92.987805] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 92.993253] ? __save_stack_trace+0x90d/0xb00 [ 92.997753] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 93.003111] ? __list_add_valid+0xb8/0x450 [ 93.007343] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 93.012788] ? __list_add_valid+0xb8/0x450 [ 93.017026] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 93.022472] ? __free_one_page+0x15a3/0x1800 [ 93.026901] __alloc_pages_nodemask+0x792/0x5cc0 [ 93.031662] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 93.037115] ? kmsan_set_origin_inline+0x6b/0x120 [ 93.041950] ? __msan_poison_alloca+0x15c/0x1d0 [ 93.046612] ? kmsan_set_origin_inline+0x6b/0x120 [ 93.051455] alloc_pages_current+0x6b1/0x970 [ 93.055867] __get_free_pages+0x2d/0xc0 [ 93.059834] unmap_page_range+0x26d2/0x3be0 [ 93.064177] unmap_single_vma+0x445/0x5e0 [ 93.068326] unmap_vmas+0x1f4/0x360 [ 93.071955] exit_mmap+0x4d7/0x980 [ 93.075495] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 93.080853] ? uprobe_clear_state+0x1b0/0x270 [ 93.085343] ? __mmput+0x3e/0x600 [ 93.088793] __mmput+0x158/0x600 [ 93.092156] ? mmput+0x53/0xf0 [ 93.095346] mmput+0xab/0xf0 [ 93.098368] flush_old_exec+0x1ace/0x2150 [ 93.102516] load_elf_binary+0x139f/0x8fe0 [ 93.106754] ? kmsan_set_origin_inline+0x6b/0x120 [ 93.111591] ? __msan_poison_alloca+0x15c/0x1d0 [ 93.116260] ? kmsan_set_origin_inline+0x6b/0x120 [ 93.121097] ? __msan_poison_alloca+0x15c/0x1d0 [ 93.123375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.125762] ? search_binary_handler+0x231/0xac0 [ 93.125776] ? load_elf_binary+0x4c31/0x8fe0 [ 93.125789] ? try_module_get+0x61/0x3d0 [ 93.125799] ? search_binary_handler+0x231/0xac0 [ 93.125812] ? search_binary_handler+0x231/0xac0 [ 93.125825] ? try_module_get+0x61/0x3d0 [ 93.125837] ? search_binary_handler+0x231/0xac0 [ 93.125848] ? search_binary_handler+0x347/0xac0 [ 93.125861] ? load_script+0xcd0/0xcd0 [ 93.125872] search_binary_handler+0x2f4/0xac0 [ 93.125888] do_execveat_common+0x22e4/0x2db0 [ 93.125910] __x64_sys_execve+0x127/0x180 [ 93.125922] ? set_binfmt+0x1b0/0x1b0 [ 93.125931] do_syscall_64+0x15b/0x230 [ 93.125945] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 93.125953] RIP: 0033:0x454387 [ 93.125959] RSP: 002b:0000000000a3fac8 EFLAGS: 00000207 ORIG_RAX: 000000000000003b [ 93.125969] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000454387 [ 93.125976] RDX: 00007ffc62a61968 RSI: 0000000000a3fb00 RDI: 00000000004d50a8 [ 93.125982] RBP: 0000000000a3fc80 R08: 0000000000000000 R09: 000000000000001a [ 93.125988] R10: 0000000000000008 R11: 0000000000000207 R12: 0000000000a3fec8 [ 93.126011] R13: 0000000000a3fe28 R14: 0000000000000000 R15: 0000000000000000 [ 93.245472] Dumping ftrace buffer: [ 93.248996] (ftrace buffer empty) [ 93.252680] Kernel Offset: disabled [ 93.256282] Rebooting in 86400 seconds..