[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 29.745534] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 31.618481] random: sshd: uninitialized urandom read (32 bytes read) [ 32.330112] random: sshd: uninitialized urandom read (32 bytes read) [ 33.589240] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.18' (ECDSA) to the list of known hosts. [ 39.153191] random: sshd: uninitialized urandom read (32 bytes read) 2018/05/17 07:38:28 fuzzer started 2018/05/17 07:38:28 dialing manager at 10.128.0.26:41335 [ 60.795725] can: request_module (can-proto-0) failed. [ 60.806387] can: request_module (can-proto-0) failed. 2018/05/17 07:38:51 kcov=true, comps=false 2018/05/17 07:38:55 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000200)}}, {{&(0x7f0000000640)=@in={0x2, 0x4e23, @rand_addr=0x61}, 0x80, &(0x7f00000008c0), 0x0, &(0x7f0000000900)}}], 0x2, 0x0) 2018/05/17 07:38:55 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)}], 0x1, 0x81003) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000240)={'broute\x00'}, &(0x7f0000000000)=0x50) mq_notify(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x2b, 0x0, @tid=r1}) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x17, 0x18, "7cc44d447d99f0259f45ba1f8d6f8d502903ebafc801a28454d89a5a88aac6758c2ce4792abe2f13dfc0f4d07f4f497e16dca6a13898f63a3c1a375aee60c412", "29b1fe7e5171623042a3c02b40cd46dda75514c0a2bcc790a5e34f186c6b6824", [0x1]}) sendfile(r0, 0xffffffffffffffff, &(0x7f00000ddff8), 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000380), &(0x7f00000003c0)=0x4) 2018/05/17 07:38:55 executing program 7: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000b00)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) 2018/05/17 07:38:55 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x100) sendmmsg$unix(r1, &(0x7f00000bd000), 0xfffffffffffffdc3, 0x0) poll(&(0x7f00000000c0)=[{r0, 0x1600}, {r1, 0x14}], 0x2, 0x0) 2018/05/17 07:38:55 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000004fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ioctl(r0, 0x40044146, &(0x7f0000001f64)) 2018/05/17 07:38:55 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000240)={'broute\x00'}, &(0x7f0000000000)=0x50) mq_notify(r1, &(0x7f00000000c0)={0x0, 0x2b, 0x2, @tid=r2}) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x17, 0x18, "7cc44d447d99f0259f45ba1f8d6f8d502903ebafc801a28454d89a5a88aac6758c2ce4792abe2f13dfc0f4d07f4f497e16dca6a13898f63a3c1a375aee60c412", "29b1fe7e5171623042a3c02b40cd46dda75514c0a2bcc790a5e34f186c6b6824", [0x1, 0x7]}) sendfile(r0, r1, &(0x7f00000ddff8), 0x102000001) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000380), &(0x7f00000003c0)=0x4) 2018/05/17 07:38:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x100000006, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="2b00000000001b207f5c5eeb0800450000580000000000009078ac14141414aab4e0880b0000000000000800000086dd080088be00000000100000000100000000000000480022eb00000000200000000200000000000000000000000800655800000000"], &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 2018/05/17 07:38:55 executing program 6: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)={0x4}) [ 67.306473] IPVS: ftp: loaded support on port[0] = 21 [ 67.348226] IPVS: ftp: loaded support on port[0] = 21 [ 67.356414] IPVS: ftp: loaded support on port[0] = 21 [ 67.403884] IPVS: ftp: loaded support on port[0] = 21 [ 67.462629] IPVS: ftp: loaded support on port[0] = 21 [ 67.470944] IPVS: ftp: loaded support on port[0] = 21 [ 67.474247] IPVS: ftp: loaded support on port[0] = 21 [ 67.501793] IPVS: ftp: loaded support on port[0] = 21 [ 69.109289] ip (4660) used greatest stack depth: 54392 bytes left [ 69.178237] ip (4663) used greatest stack depth: 54248 bytes left [ 70.168810] ip (4750) used greatest stack depth: 53800 bytes left [ 70.550588] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.557096] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.600746] device bridge_slave_0 entered promiscuous mode [ 70.652009] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.658612] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.679649] device bridge_slave_0 entered promiscuous mode [ 70.738188] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.744666] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.783244] device bridge_slave_1 entered promiscuous mode [ 70.808674] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.815138] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.844116] device bridge_slave_0 entered promiscuous mode [ 70.868225] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.874715] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.898193] device bridge_slave_0 entered promiscuous mode [ 70.922923] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.929421] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.944968] device bridge_slave_0 entered promiscuous mode [ 70.962810] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.969297] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.985351] device bridge_slave_1 entered promiscuous mode [ 71.005989] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.012484] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.020844] device bridge_slave_0 entered promiscuous mode [ 71.033994] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.040478] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.052424] device bridge_slave_1 entered promiscuous mode [ 71.064595] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.071125] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.091444] device bridge_slave_0 entered promiscuous mode [ 71.107188] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 71.115484] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.121933] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.152176] device bridge_slave_1 entered promiscuous mode [ 71.166088] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.172527] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.189952] device bridge_slave_0 entered promiscuous mode [ 71.219796] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 71.227591] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.234080] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.270773] device bridge_slave_1 entered promiscuous mode [ 71.286157] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 71.293366] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.299867] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.317775] device bridge_slave_1 entered promiscuous mode [ 71.337436] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 71.350752] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.357207] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.387170] device bridge_slave_1 entered promiscuous mode [ 71.403121] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 71.410913] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.417363] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.454657] device bridge_slave_1 entered promiscuous mode [ 71.471580] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 71.501298] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 71.509502] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 71.530009] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 71.624251] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 71.654242] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 71.705840] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 71.719184] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 71.727768] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 71.828267] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 71.878431] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 71.919735] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 71.950093] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 72.144755] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 72.175115] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 72.219804] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 72.280782] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 72.350847] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 72.372692] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 72.391444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.421024] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 72.430886] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 72.442681] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 72.453862] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 72.462934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.497519] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 72.541421] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 72.585614] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 72.652653] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 72.665211] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 72.675851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.706309] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 72.714743] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 72.724528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.804918] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 72.814187] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 72.821951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.842630] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 72.853551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.897933] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 72.904896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.962370] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 72.969397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.013852] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 73.021241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.034983] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 73.041967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.078276] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 73.095460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.115597] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 73.132527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.279136] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 73.295810] team0: Port device team_slave_0 added [ 73.321219] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 73.328550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.359206] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 73.376814] team0: Port device team_slave_0 added [ 73.399634] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 73.407547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.449207] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 73.477434] team0: Port device team_slave_1 added [ 73.531265] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 73.555493] team0: Port device team_slave_0 added [ 73.598008] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 73.620871] team0: Port device team_slave_1 added [ 73.657485] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.677444] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 73.690822] team0: Port device team_slave_0 added [ 73.722232] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 73.748826] team0: Port device team_slave_0 added [ 73.778393] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 73.786101] team0: Port device team_slave_0 added [ 73.797788] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 73.809700] team0: Port device team_slave_1 added [ 73.817148] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 73.833435] team0: Port device team_slave_1 added [ 73.858501] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 73.865677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.882994] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.921566] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 73.928532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.947836] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.996661] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 74.011795] team0: Port device team_slave_1 added [ 74.020712] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 74.031652] team0: Port device team_slave_1 added [ 74.051880] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 74.066450] team0: Port device team_slave_0 added [ 74.072201] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 74.080829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.102867] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.141006] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 74.148449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.160858] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.191383] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 74.200462] team0: Port device team_slave_0 added [ 74.207612] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 74.215866] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 74.222784] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.234093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.266583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.292668] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.310935] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 74.318087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.327604] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.342566] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 74.350084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.361325] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.381876] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 74.391669] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 74.407960] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 74.419329] team0: Port device team_slave_1 added [ 74.442158] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.459004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.473546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.482334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.492078] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 74.500568] team0: Port device team_slave_1 added [ 74.507852] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 74.516642] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 74.525160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.542312] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.566863] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.588381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.622657] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 74.634127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.642833] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.665829] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 74.674638] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 74.685776] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 74.694906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.723981] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.752930] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.772969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.789651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.798396] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.806780] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 74.822637] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 74.837697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.846416] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.858731] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.882541] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.898710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.917833] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 74.926764] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 74.936165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.944832] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.955742] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.971352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.990768] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 75.003476] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 75.013157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.028492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.047707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.075529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.095353] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 75.106013] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 75.119626] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 75.130566] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.167111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.194232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.210092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.221559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.237369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.256895] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 75.264532] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.274957] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.298086] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 75.305926] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.317704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.352193] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 75.363315] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 75.370602] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.397226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.442280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.469128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.515493] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 75.523754] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.534552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.946680] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.953157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.959980] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.966411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.032286] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 77.038892] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.278502] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.284985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.291772] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.298201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.344976] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 77.371605] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.378091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.384860] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.391272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.450848] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 77.467067] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.473519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.480314] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.486741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.508201] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 77.527587] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.534018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.540824] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.547282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.556537] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 77.773917] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.780398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.787190] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.793606] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.854974] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 77.863134] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.869576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.876344] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.882758] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.898154] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 77.904662] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.911125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.917893] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.924342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.932425] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 78.048563] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.063186] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.100652] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.127942] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.147586] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.159195] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.166610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.219977] ================================================================== [ 78.227408] BUG: KMSAN: uninit-value in get_page_from_freelist+0x5e50/0xb600 [ 78.234599] CPU: 0 PID: 4522 Comm: syz-executor7 Not tainted 4.17.0-rc5+ #96 [ 78.241779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 78.251125] Call Trace: [ 78.253711] dump_stack+0x185/0x1d0 [ 78.257336] ? get_page_from_freelist+0x5e50/0xb600 [ 78.262351] kmsan_report+0x142/0x240 [ 78.266149] __msan_warning_32+0x6c/0xb0 [ 78.270209] get_page_from_freelist+0x5e50/0xb600 [ 78.275059] ? __alloc_pages_nodemask+0xf8e/0x5dd0 [ 78.279987] ? get_page_from_freelist+0x5efb/0xb600 [ 78.284999] ? kernel_poison_pages+0x40/0x360 [ 78.289496] ? kernel_poison_pages+0x1a0/0x360 [ 78.294084] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 78.299452] ? is_bpf_text_address+0xb4/0x4b0 [ 78.303946] ? kmsan_set_origin_inline+0x6b/0x120 [ 78.308786] ? __msan_poison_alloca+0x15c/0x1d0 [ 78.313469] ? __alloc_pages_nodemask+0x464/0x5dd0 [ 78.318403] __alloc_pages_nodemask+0x7aa/0x5dd0 [ 78.323161] ? __is_insn_slot_addr+0x198/0x1c0 [ 78.327746] ? kernel_text_address+0x34d/0x3a0 [ 78.332331] ? __kernel_text_address+0x34/0xe0 [ 78.336914] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 78.342366] ? __save_stack_trace+0x90d/0xb00 [ 78.346870] alloc_pages_current+0x6b5/0x970 [ 78.351281] get_zeroed_page+0x3f/0xd0 [ 78.355167] __pud_alloc+0xab/0x440 [ 78.358793] ? copy_process+0x6d87/0x9bb0 [ 78.362938] copy_page_range+0x3bda/0x3f10 [ 78.367172] ? _cond_resched+0x3c/0xd0 [ 78.371060] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 78.376514] ? __rb_insert_augmented+0xd4e/0x13e0 [ 78.381358] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 78.386720] ? init_admin_reserve+0x160/0x160 [ 78.391220] ? __vma_link_rb+0xc0e/0xcd0 [ 78.395286] copy_process+0x6d87/0x9bb0 [ 78.399270] _do_fork+0x311/0xf00 [ 78.402727] __x64_sys_clone+0x15e/0x1b0 [ 78.406789] do_syscall_64+0x154/0x220 [ 78.410679] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 78.415861] RIP: 0033:0x41f829 [ 78.419043] RSP: 002b:0000000000a3fad0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 78.426745] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000041f829 [ 78.434008] RDX: 0000000000a3fadc RSI: 0000000000000000 RDI: 0000000000100011 [ 78.441279] RBP: 0000000000a3fc80 R08: 0000000000a44a60 R09: 0000000000000018 [ 78.448542] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000a3fe80 [ 78.455806] R13: 0000000000a3fe28 R14: 0000000000000000 R15: 0000000000000000 [ 78.463071] [ 78.464689] Uninit was stored to memory at: [ 78.469017] kmsan_internal_chain_origin+0x12b/0x210 [ 78.474123] __msan_chain_origin+0x69/0xc0 [ 78.478354] free_unref_page_commit+0x4bc/0x4d0 [ 78.483019] free_pages+0x290/0x320 [ 78.486643] tlb_finish_mmu+0x3f7/0x5c0 [ 78.490616] exit_mmap+0x496/0x970 [ 78.494151] __mmput+0x16c/0x610 [ 78.497512] mmput+0xab/0xf0 [ 78.500527] exit_mm+0x6ed/0x7a0 [ 78.504242] do_exit+0xc01/0x38d0 [ 78.507693] do_group_exit+0x1a0/0x360 [ 78.511579] __do_sys_exit_group+0x21/0x30 [ 78.515811] __se_sys_exit_group+0x14/0x20 [ 78.520046] __x64_sys_exit_group+0x4c/0x50 [ 78.524362] do_syscall_64+0x154/0x220 [ 78.528249] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 78.533424] Uninit was stored to memory at: [ 78.537753] kmsan_internal_chain_origin+0x12b/0x210 [ 78.542848] __msan_chain_origin+0x69/0xc0 [ 78.547076] unmap_page_range+0xeb4/0x3be0 [ 78.551308] unmap_single_vma+0x45b/0x5f0 [ 78.555456] unmap_vmas+0x1f4/0x360 [ 78.559081] exit_mmap+0x43d/0x970 [ 78.562613] __mmput+0x16c/0x610 [ 78.565973] mmput+0xab/0xf0 [ 78.568990] exit_mm+0x6ed/0x7a0 [ 78.572358] do_exit+0xc01/0x38d0 [ 78.575804] do_group_exit+0x1a0/0x360 [ 78.579684] __do_sys_exit_group+0x21/0x30 [ 78.583919] __se_sys_exit_group+0x14/0x20 [ 78.588151] __x64_sys_exit_group+0x4c/0x50 [ 78.592467] do_syscall_64+0x154/0x220 [ 78.596351] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 78.601527] Uninit was stored to memory at: [ 78.605849] kmsan_internal_chain_origin+0x12b/0x210 [ 78.610946] __msan_chain_origin+0x69/0xc0 [ 78.615177] free_unref_page_commit+0x4bc/0x4d0 [ 78.619844] free_pages+0x290/0x320 [ 78.623468] tlb_finish_mmu+0x3f7/0x5c0 [ 78.627444] exit_mmap+0x496/0x970 [ 78.630984] __mmput+0x16c/0x610 [ 78.634345] mmput+0xab/0xf0 [ 78.637363] exit_mm+0x6ed/0x7a0 [ 78.640728] do_exit+0xc01/0x38d0 [ 78.644179] do_group_exit+0x1a0/0x360 [ 78.648060] __do_sys_exit_group+0x21/0x30 [ 78.652293] __se_sys_exit_group+0x14/0x20 [ 78.656525] __x64_sys_exit_group+0x4c/0x50 [ 78.660841] do_syscall_64+0x154/0x220 [ 78.664729] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 78.669909] Local variable description: ----tlb@exit_mmap [ 78.675438] Variable was created at: [ 78.679148] exit_mmap+0x48/0x970 [ 78.682591] __mmput+0x16c/0x610 [ 78.685940] ================================================================== [ 78.693286] Disabling lock debugging due to kernel taint [ 78.698730] Kernel panic - not syncing: panic_on_warn set ... [ 78.698730] [ 78.706096] CPU: 0 PID: 4522 Comm: syz-executor7 Tainted: G B 4.17.0-rc5+ #96 [ 78.714669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 78.724016] Call Trace: [ 78.726608] dump_stack+0x185/0x1d0 [ 78.730239] panic+0x39d/0x940 [ 78.733449] ? get_page_from_freelist+0x5e50/0xb600 [ 78.738477] kmsan_report+0x238/0x240 [ 78.742281] __msan_warning_32+0x6c/0xb0 [ 78.746343] get_page_from_freelist+0x5e50/0xb600 [ 78.751189] ? __alloc_pages_nodemask+0xf8e/0x5dd0 [ 78.756114] ? get_page_from_freelist+0x5efb/0xb600 [ 78.761130] ? kernel_poison_pages+0x40/0x360 [ 78.765624] ? kernel_poison_pages+0x1a0/0x360 [ 78.770212] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 78.775573] ? is_bpf_text_address+0xb4/0x4b0 [ 78.780071] ? kmsan_set_origin_inline+0x6b/0x120 [ 78.784911] ? __msan_poison_alloca+0x15c/0x1d0 [ 78.789583] ? __alloc_pages_nodemask+0x464/0x5dd0 [ 78.794514] __alloc_pages_nodemask+0x7aa/0x5dd0 [ 78.799267] ? __is_insn_slot_addr+0x198/0x1c0 [ 78.803850] ? kernel_text_address+0x34d/0x3a0 [ 78.808433] ? __kernel_text_address+0x34/0xe0 [ 78.813020] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 78.818470] ? __save_stack_trace+0x90d/0xb00 [ 78.822976] alloc_pages_current+0x6b5/0x970 [ 78.827386] get_zeroed_page+0x3f/0xd0 [ 78.831270] __pud_alloc+0xab/0x440 [ 78.834897] ? copy_process+0x6d87/0x9bb0 [ 78.839045] copy_page_range+0x3bda/0x3f10 [ 78.843283] ? _cond_resched+0x3c/0xd0 [ 78.847170] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 78.852707] ? __rb_insert_augmented+0xd4e/0x13e0 [ 78.857556] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 78.862921] ? init_admin_reserve+0x160/0x160 [ 78.867415] ? __vma_link_rb+0xc0e/0xcd0 [ 78.871488] copy_process+0x6d87/0x9bb0 [ 78.875480] _do_fork+0x311/0xf00 [ 78.878938] __x64_sys_clone+0x15e/0x1b0 [ 78.882997] do_syscall_64+0x154/0x220 [ 78.886888] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 78.892071] RIP: 0033:0x41f829 [ 78.895251] RSP: 002b:0000000000a3fad0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 78.902953] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000041f829 [ 78.910218] RDX: 0000000000a3fadc RSI: 0000000000000000 RDI: 0000000000100011 [ 78.917481] RBP: 0000000000a3fc80 R08: 0000000000a44a60 R09: 0000000000000018 [ 78.924749] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000a3fe80 [ 78.932015] R13: 0000000000a3fe28 R14: 0000000000000000 R15: 0000000000000000 [ 78.939784] Dumping ftrace buffer: [ 78.943323] (ftrace buffer empty) [ 78.947008] Kernel Offset: disabled [ 78.950613] Rebooting in 86400 seconds..