[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 29.886764] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 34.834277] random: sshd: uninitialized urandom read (32 bytes read) [ 35.434320] random: sshd: uninitialized urandom read (32 bytes read) [ 36.728322] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.63' (ECDSA) to the list of known hosts. [ 42.205453] random: sshd: uninitialized urandom read (32 bytes read) 2018/05/17 00:11:30 fuzzer started 2018/05/17 00:11:30 dialing manager at 10.128.0.26:41335 [ 65.311196] can: request_module (can-proto-0) failed. [ 65.322159] can: request_module (can-proto-0) failed. 2018/05/17 00:11:55 kcov=true, comps=false 2018/05/17 00:11:59 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000001880)={&(0x7f0000000000)=@in={0x2, 0x0, @loopback=0x7f000001}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000080)='0', 0x1}], 0x1, &(0x7f00000018c0)}, 0x0) 2018/05/17 00:11:59 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(blowfish))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="0a073419", 0x4) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f00000012c0)={&(0x7f0000f7ffa8)=@alg, 0x80, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1, &(0x7f0000001240)=""/87, 0x57}, 0x0) 2018/05/17 00:11:59 executing program 1: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setsig(r0, 0xa, 0xb) fcntl$setlease(r0, 0x400, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") truncate(&(0x7f000037eff8)='./file0\x00', 0x0) 2018/05/17 00:11:59 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="4626262c8523bf012cf66f") syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') 2018/05/17 00:11:59 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = msgget$private(0x0, 0x0) msgrcv(r0, &(0x7f0000000000)={0x0, ""/86}, 0x513, 0x0, 0x1000002000) msgsnd(r0, &(0x7f0000000080)={0x3}, 0x8, 0x800) 2018/05/17 00:11:59 executing program 3: geteuid() sysfs$2(0x2, 0xe72c, &(0x7f0000000340)=""/175) setreuid(0x0, 0x0) clone(0x50800000, &(0x7f00000002c0), &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000012c0)) socketpair(0x3, 0x0, 0xffffffffffff5f43, &(0x7f00000001c0)) 2018/05/17 00:11:59 executing program 5: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4c, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/unix\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/204, 0xcc}], 0x1, 0x0) 2018/05/17 00:11:59 executing program 6: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x4000) sendfile(r0, r1, &(0x7f00000000c0)=0x100000, 0x80000002) [ 71.824854] IPVS: ftp: loaded support on port[0] = 21 [ 71.862734] IPVS: ftp: loaded support on port[0] = 21 [ 71.884287] IPVS: ftp: loaded support on port[0] = 21 [ 71.912811] IPVS: ftp: loaded support on port[0] = 21 [ 71.925621] IPVS: ftp: loaded support on port[0] = 21 [ 71.927263] IPVS: ftp: loaded support on port[0] = 21 [ 71.945523] IPVS: ftp: loaded support on port[0] = 21 [ 71.959693] IPVS: ftp: loaded support on port[0] = 21 [ 73.750535] ip (4690) used greatest stack depth: 54312 bytes left [ 74.316871] ip (4736) used greatest stack depth: 54088 bytes left [ 74.846222] ip (4783) used greatest stack depth: 53800 bytes left [ 75.129736] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.136288] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.172259] device bridge_slave_0 entered promiscuous mode [ 75.211632] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.218163] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.241115] device bridge_slave_0 entered promiscuous mode [ 75.291786] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.298313] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.329119] device bridge_slave_0 entered promiscuous mode [ 75.338856] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.345342] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.361228] device bridge_slave_0 entered promiscuous mode [ 75.376148] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.382622] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.393177] device bridge_slave_0 entered promiscuous mode [ 75.406812] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.413257] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.436411] device bridge_slave_0 entered promiscuous mode [ 75.460571] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.467804] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.492330] device bridge_slave_1 entered promiscuous mode [ 75.499637] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.506113] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.522840] device bridge_slave_0 entered promiscuous mode [ 75.531451] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.537882] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.559827] device bridge_slave_0 entered promiscuous mode [ 75.568474] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.574909] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.594637] device bridge_slave_1 entered promiscuous mode [ 75.614556] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.621104] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.638275] device bridge_slave_1 entered promiscuous mode [ 75.649570] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.656107] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.673757] device bridge_slave_1 entered promiscuous mode [ 75.692725] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.699281] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.707844] device bridge_slave_1 entered promiscuous mode [ 75.717317] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.723843] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.740949] device bridge_slave_1 entered promiscuous mode [ 75.751815] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.758311] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.771095] device bridge_slave_1 entered promiscuous mode [ 75.781822] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.788273] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.805399] device bridge_slave_1 entered promiscuous mode [ 75.817765] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 75.837855] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 75.846129] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 75.855814] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 75.869121] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 75.894688] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 75.986214] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 76.007309] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 76.022239] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 76.039306] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 76.047776] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 76.059324] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 76.097008] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 76.118330] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 76.169468] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 76.238750] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 76.440630] ip (4889) used greatest stack depth: 53784 bytes left [ 76.582735] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 76.665686] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 76.690570] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 76.714131] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 76.746173] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 76.760960] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 76.794284] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 76.825697] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 76.889566] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 76.906111] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 76.918536] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 76.941831] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 76.953229] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 76.966235] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 76.998297] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 77.075013] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 77.155510] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 77.162556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.182318] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 77.198722] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 77.208334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.216649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.236841] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 77.245205] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 77.253496] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 77.263973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.278779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.320966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.357580] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 77.365323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.385936] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 77.393740] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 77.401181] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 77.415898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.426893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.462410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.506074] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 77.514096] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 77.521940] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 77.528861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.546239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.565954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.583351] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 77.610525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.648761] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 77.672349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.967256] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 77.984533] team0: Port device team_slave_0 added [ 78.073932] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 78.103879] team0: Port device team_slave_0 added [ 78.130360] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 78.146744] team0: Port device team_slave_0 added [ 78.154287] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 78.170727] team0: Port device team_slave_0 added [ 78.185320] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 78.208410] team0: Port device team_slave_0 added [ 78.236226] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 78.250800] team0: Port device team_slave_0 added [ 78.262085] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 78.277747] team0: Port device team_slave_0 added [ 78.283475] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 78.290955] team0: Port device team_slave_1 added [ 78.303060] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 78.315279] team0: Port device team_slave_0 added [ 78.323436] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 78.340375] team0: Port device team_slave_1 added [ 78.356817] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 78.373573] team0: Port device team_slave_1 added [ 78.395806] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 78.412865] team0: Port device team_slave_1 added [ 78.432920] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 78.451854] team0: Port device team_slave_1 added [ 78.465782] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 78.485550] team0: Port device team_slave_1 added [ 78.509962] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 78.518345] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 78.526925] team0: Port device team_slave_1 added [ 78.537106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.551842] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.576582] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 78.592128] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 78.613461] team0: Port device team_slave_1 added [ 78.628818] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 78.637930] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 78.648231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.676899] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.697276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.717851] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.740120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.748596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.758433] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 78.769590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.778115] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.791947] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 78.802341] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 78.809538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.822140] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.841093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.860012] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.880776] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 78.889497] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 78.896439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.905184] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.913869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.922905] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.942233] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 78.956781] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 78.967650] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 78.974669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.989794] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.013945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.032829] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.052594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.071380] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.081622] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 79.090083] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.100650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.122804] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 79.129784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.138823] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.155476] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 79.164873] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 79.173262] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 79.181937] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 79.189312] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 79.196321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.208808] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.246849] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.282594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.308863] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.322958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.332671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.341011] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.348620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.356554] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.364938] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 79.374973] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.383570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.407492] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 79.416669] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 79.425195] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.434443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.456179] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.465787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.475842] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 79.485245] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 79.496149] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 79.505391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.528843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.544895] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.565135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.579436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.594142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.606872] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 79.615969] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.631976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.641764] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 79.664939] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.682666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.699327] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 79.707005] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.727419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.754926] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 79.764728] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 79.777894] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 79.785284] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.798884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.834665] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.845136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.860152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.875713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.904008] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 79.913055] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.932159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.789097] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.795621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.802491] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.808929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.853548] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 81.860459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.881572] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.888109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.894913] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.901357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.914769] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 81.949755] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.956253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.963125] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.969600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.049084] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 82.069433] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.075911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.082743] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.089196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.114568] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 82.121766] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.128206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.135055] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.141518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.158446] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 82.183649] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.190109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.196901] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.203330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.245490] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 82.257093] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.263586] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.270409] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.276858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.285605] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 82.457544] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.464089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.470896] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.477374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.496132] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 82.911587] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.927297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.954622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.974018] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.993396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.001771] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.009705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.308324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.465786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.569465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.610711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.736782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.780653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.818951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.881417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.073384] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 91.287606] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 91.327180] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 91.428659] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 91.564332] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 91.583371] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 91.592211] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 91.672682] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 91.880512] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 91.886800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 91.901736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.118541] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 92.124931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.142153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.167634] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 92.180889] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 92.190603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.209286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.238898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.260199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.319296] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 92.326498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.335337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.491880] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 92.498497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.506880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.539838] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 92.555868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.576826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.730103] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 92.737482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.750826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.805253] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.847909] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.955399] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.975267] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.113228] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.226334] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.464411] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.538800] 8021q: adding VLAN 0 to HW filter on device team0 2018/05/17 00:12:25 executing program 7: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000d80)=ANY=[@ANYBLOB="280000001800010000000000000000000200f0ffffffff08000000000c00070000009e00"], 0x1}, 0x1}, 0x0) [ 97.709915] ================================================================== [ 97.717365] BUG: KMSAN: uninit-value in netlink_rcv_skb+0x3e3/0x600 [ 97.723791] CPU: 0 PID: 6551 Comm: syz-executor6 Not tainted 4.17.0-rc5+ #96 [ 97.730990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 97.740361] Call Trace: [ 97.742965] dump_stack+0x185/0x1d0 [ 97.746610] ? netlink_rcv_skb+0x3e3/0x600 [ 97.750864] kmsan_report+0x142/0x240 [ 97.754682] __msan_warning_32+0x6c/0xb0 [ 97.758756] netlink_rcv_skb+0x3e3/0x600 [ 97.762830] ? rtnetlink_bind+0x120/0x120 [ 97.766990] rtnetlink_rcv+0x50/0x60 [ 97.770728] netlink_unicast+0x166b/0x1740 [ 97.774976] ? rtnetlink_net_exit+0xa0/0xa0 [ 97.779311] netlink_sendmsg+0x1072/0x1370 [ 97.783562] kernel_sendmsg+0x228/0x2d0 [ 97.787564] ? netlink_getsockopt+0xc80/0xc80 [ 97.792073] sock_no_sendpage+0x1c8/0x250 [ 97.796252] ? sock_no_mmap+0x30/0x30 [ 97.800059] sock_sendpage+0x1de/0x2c0 [ 97.803962] pipe_to_sendpage+0x31b/0x430 [ 97.808209] ? sock_fasync+0x2b0/0x2b0 [ 97.812107] ? generic_pipe_buf_get+0xf0/0xf0 [ 97.816611] __splice_from_pipe+0x49a/0xf30 [ 97.820942] ? generic_splice_sendpage+0x2a0/0x2a0 [ 97.825890] generic_splice_sendpage+0x1c6/0x2a0 [ 97.830659] ? iter_file_splice_write+0x1710/0x1710 [ 97.835682] ? iter_file_splice_write+0x1710/0x1710 [ 97.840706] direct_splice_actor+0x19b/0x200 [ 97.845130] splice_direct_to_actor+0x764/0x1040 [ 97.849893] ? do_splice_direct+0x540/0x540 [ 97.854225] ? security_file_permission+0x269/0x490 2018/05/17 00:12:25 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000100)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x20, 0x3, 0x8, 0xffffffffffffffff, 0x0, 0x0, {}, [@typed={0xc, 0x2, @u64}]}, 0x20}, 0x1}, 0x0) [ 97.859262] do_splice_direct+0x335/0x540 [ 97.863429] do_sendfile+0x1067/0x1e40 [ 97.867333] __x64_sys_sendfile64+0x218/0x390 [ 97.871836] do_syscall_64+0x154/0x220 [ 97.875741] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 97.880930] RIP: 0033:0x455a09 [ 97.884122] RSP: 002b:00007f9de01fbc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 97.891831] RAX: ffffffffffffffda RBX: 00007f9de01fc6d4 RCX: 0000000000455a09 [ 97.899104] RDX: 00000000200000c0 RSI: 0000000000000014 RDI: 0000000000000013 [ 97.906378] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 97.913651] R10: 0000000080000002 R11: 0000000000000246 R12: 00000000ffffffff [ 97.920929] R13: 0000000000000579 R14: 00000000006fc3f8 R15: 0000000000000000 [ 97.928212] [ 97.929840] Uninit was stored to memory at: [ 97.934181] kmsan_internal_chain_origin+0x12b/0x210 [ 97.939299] kmsan_memcpy_origins+0x11d/0x170 [ 97.943798] __msan_memcpy+0x109/0x160 [ 97.947695] _copy_from_iter_full+0xdfc/0x1450 [ 97.952284] netlink_sendmsg+0xe1c/0x1370 [ 97.956436] kernel_sendmsg+0x228/0x2d0 [ 97.960419] sock_no_sendpage+0x1c8/0x250 [ 97.964571] sock_sendpage+0x1de/0x2c0 [ 97.968465] pipe_to_sendpage+0x31b/0x430 [ 97.972616] __splice_from_pipe+0x49a/0xf30 [ 97.976943] generic_splice_sendpage+0x1c6/0x2a0 [ 97.981713] direct_splice_actor+0x19b/0x200 [ 97.986134] splice_direct_to_actor+0x764/0x1040 [ 97.990898] do_splice_direct+0x335/0x540 [ 97.995056] do_sendfile+0x1067/0x1e40 [ 97.998953] __x64_sys_sendfile64+0x218/0x390 [ 98.003464] do_syscall_64+0x154/0x220 [ 98.007369] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 98.012552] Uninit was created at: [ 98.016109] kmsan_alloc_meta_for_pages+0x161/0x3a0 [ 98.021138] kmsan_alloc_page+0x82/0xe0 [ 98.025127] __alloc_pages_nodemask+0xf8e/0x5dd0 [ 98.029889] alloc_pages_current+0x6b5/0x970 [ 98.034304] push_pipe+0x680/0xca0 [ 98.037854] iov_iter_get_pages+0x1357/0x1810 [ 98.042359] __blockdev_direct_IO+0x1a4d/0x6580 [ 98.047037] ext4_direct_IO+0xed8/0x27c0 [ 98.051163] generic_file_read_iter+0x3bd2/0x4440 [ 98.056017] ext4_file_read_iter+0x30f/0x520 [ 98.060441] generic_file_splice_read+0x5d2/0x900 [ 98.065301] splice_direct_to_actor+0x4c6/0x1040 [ 98.070075] do_splice_direct+0x335/0x540 [ 98.074247] do_sendfile+0x1067/0x1e40 [ 98.078148] __x64_sys_sendfile64+0x218/0x390 [ 98.082658] do_syscall_64+0x154/0x220 [ 98.086560] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 98.091745] ================================================================== [ 98.099102] Disabling lock debugging due to kernel taint [ 98.104549] Kernel panic - not syncing: panic_on_warn set ... [ 98.104549] [ 98.111921] CPU: 0 PID: 6551 Comm: syz-executor6 Tainted: G B 4.17.0-rc5+ #96 [ 98.120495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 98.129855] Call Trace: [ 98.132456] dump_stack+0x185/0x1d0 [ 98.136097] panic+0x39d/0x940 [ 98.139315] ? netlink_rcv_skb+0x3e3/0x600 [ 98.143563] kmsan_report+0x238/0x240 [ 98.147371] __msan_warning_32+0x6c/0xb0 [ 98.151437] netlink_rcv_skb+0x3e3/0x600 [ 98.155501] ? rtnetlink_bind+0x120/0x120 [ 98.159653] rtnetlink_rcv+0x50/0x60 [ 98.163372] netlink_unicast+0x166b/0x1740 [ 98.167614] ? rtnetlink_net_exit+0xa0/0xa0 [ 98.171945] netlink_sendmsg+0x1072/0x1370 [ 98.176191] kernel_sendmsg+0x228/0x2d0 [ 98.180171] ? netlink_getsockopt+0xc80/0xc80 [ 98.184678] sock_no_sendpage+0x1c8/0x250 [ 98.188837] ? sock_no_mmap+0x30/0x30 [ 98.192643] sock_sendpage+0x1de/0x2c0 [ 98.196545] pipe_to_sendpage+0x31b/0x430 [ 98.200690] ? sock_fasync+0x2b0/0x2b0 [ 98.204585] ? generic_pipe_buf_get+0xf0/0xf0 [ 98.207993] netlink: 'syz-executor7': attribute type 2 has an invalid length. [ 98.209085] __splice_from_pipe+0x49a/0xf30 [ 98.209100] ? generic_splice_sendpage+0x2a0/0x2a0 [ 98.209120] generic_splice_sendpage+0x1c6/0x2a0 [ 98.209138] ? iter_file_splice_write+0x1710/0x1710 [ 98.209151] ? iter_file_splice_write+0x1710/0x1710 [ 98.209164] direct_splice_actor+0x19b/0x200 [ 98.209182] splice_direct_to_actor+0x764/0x1040 [ 98.209194] ? do_splice_direct+0x540/0x540 [ 98.209213] ? security_file_permission+0x269/0x490 [ 98.209241] do_splice_direct+0x335/0x540 [ 98.263114] do_sendfile+0x1067/0x1e40 [ 98.267024] __x64_sys_sendfile64+0x218/0x390 [ 98.271533] do_syscall_64+0x154/0x220 [ 98.275430] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 98.280618] RIP: 0033:0x455a09 [ 98.283802] RSP: 002b:00007f9de01fbc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 98.291512] RAX: ffffffffffffffda RBX: 00007f9de01fc6d4 RCX: 0000000000455a09 [ 98.298785] RDX: 00000000200000c0 RSI: 0000000000000014 RDI: 0000000000000013 [ 98.306060] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 98.313330] R10: 0000000080000002 R11: 0000000000000246 R12: 00000000ffffffff [ 98.320604] R13: 0000000000000579 R14: 00000000006fc3f8 R15: 0000000000000000 [ 98.328336] Dumping ftrace buffer: [ 98.331858] (ftrace buffer empty) [ 98.335544] Kernel Offset: disabled [ 98.339147] Rebooting in 86400 seconds..