[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 30.255732] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 32.493890] random: sshd: uninitialized urandom read (32 bytes read) [ 32.898485] random: sshd: uninitialized urandom read (32 bytes read) [ 34.109552] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.13' (ECDSA) to the list of known hosts. [ 39.633771] random: sshd: uninitialized urandom read (32 bytes read) 2018/06/04 22:24:50 fuzzer started 2018/06/04 22:24:51 dialing manager at 10.128.0.26:45299 [ 63.793628] can: request_module (can-proto-0) failed. [ 63.804828] can: request_module (can-proto-0) failed. 2018/06/04 22:25:16 kcov=true, comps=false 2018/06/04 22:25:23 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) 2018/06/04 22:25:23 executing program 1: syz_open_procfs(0x0, &(0x7f0000000040)='personality\x00') r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = gettid() syz_open_procfs(r1, &(0x7f0000000080)="6e756d610acc31c9f20f156937f59d2c31cb951e5f6d61707300") 2018/06/04 22:25:23 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={"65716cffffffff007a000000eb00", 0x103}) r1 = socket$nl_route(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) read(0xffffffffffffffff, &(0x7f0000000380)=""/4096, 0x35) 2018/06/04 22:25:23 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') unshare(0x400) r1 = socket$inet6(0xa, 0x8001000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") preadv(r0, &(0x7f00000000c0), 0x0, 0x0) 2018/06/04 22:25:23 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) r1 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r1, &(0x7f0000000040)="16", 0x1) sendfile(r0, r1, &(0x7f0000000000), 0xffff) fcntl$addseals(r1, 0x409, 0x8) write(r1, &(0x7f00000000c0), 0x0) 2018/06/04 22:25:23 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x2, 0x8001) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x2b) 2018/06/04 22:25:23 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000380)=0x200000000) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) close(r0) 2018/06/04 22:25:23 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x20081) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x857, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) fdatasync(r0) [ 72.841792] IPVS: ftp: loaded support on port[0] = 21 [ 72.868952] IPVS: ftp: loaded support on port[0] = 21 [ 72.922259] IPVS: ftp: loaded support on port[0] = 21 [ 72.926559] IPVS: ftp: loaded support on port[0] = 21 [ 72.968520] IPVS: ftp: loaded support on port[0] = 21 [ 72.973999] IPVS: ftp: loaded support on port[0] = 21 [ 72.983097] IPVS: ftp: loaded support on port[0] = 21 [ 73.003644] IPVS: ftp: loaded support on port[0] = 21 [ 74.733360] ip (4688) used greatest stack depth: 54520 bytes left [ 75.004432] ip (4710) used greatest stack depth: 53880 bytes left [ 76.072329] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.078803] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.136094] device bridge_slave_0 entered promiscuous mode [ 76.356476] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.362980] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.381959] device bridge_slave_1 entered promiscuous mode [ 76.393209] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.399688] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.410860] device bridge_slave_0 entered promiscuous mode [ 76.445770] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.452282] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.466861] device bridge_slave_0 entered promiscuous mode [ 76.480235] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.486751] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.519633] device bridge_slave_0 entered promiscuous mode [ 76.534682] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.541184] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.562664] device bridge_slave_0 entered promiscuous mode [ 76.576952] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.583421] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.597113] device bridge_slave_0 entered promiscuous mode [ 76.608438] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 76.626701] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.633163] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.663615] device bridge_slave_0 entered promiscuous mode [ 76.680932] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.687447] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.697281] device bridge_slave_1 entered promiscuous mode [ 76.704407] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.710945] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.719105] device bridge_slave_1 entered promiscuous mode [ 76.732644] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.739172] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.764696] device bridge_slave_1 entered promiscuous mode [ 76.774311] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.780765] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.791348] device bridge_slave_0 entered promiscuous mode [ 76.821700] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.828171] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.845799] device bridge_slave_1 entered promiscuous mode [ 76.854932] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.861416] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.882986] device bridge_slave_1 entered promiscuous mode [ 76.904175] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.910618] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.931740] device bridge_slave_1 entered promiscuous mode [ 76.939641] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 76.953484] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 76.963538] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 76.974984] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 76.982214] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.988676] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.040226] device bridge_slave_1 entered promiscuous mode [ 77.069939] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 77.081470] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 77.167008] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 77.176108] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 77.187707] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 77.202739] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 77.227551] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 77.275211] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 77.283845] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 77.412113] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 77.464540] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 77.582262] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 77.813542] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 77.825798] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 77.837295] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 77.890415] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 77.932448] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 77.934178] ip (4922) used greatest stack depth: 53752 bytes left [ 77.956386] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 78.016902] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 78.023954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.041896] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 78.089669] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 78.099237] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 78.123015] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 78.136752] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 78.167490] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 78.194419] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 78.232231] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 78.239310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.282533] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 78.296435] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 78.303490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.351360] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 78.358403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.380578] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 78.387562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.405483] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 78.424468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.448656] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 78.461621] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 78.468645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.514168] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 78.521427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.549343] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 78.561814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.591901] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 78.599018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.640479] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 78.647488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.668762] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 78.675876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.689285] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 78.704143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.719565] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 78.726622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.778326] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 78.785356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.940640] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 78.947924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.020729] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 79.034865] team0: Port device team_slave_0 added [ 79.235391] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 79.262656] team0: Port device team_slave_0 added [ 79.292015] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 79.311879] team0: Port device team_slave_0 added [ 79.326812] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 79.342687] team0: Port device team_slave_1 added [ 79.354264] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 79.373894] team0: Port device team_slave_0 added [ 79.379756] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 79.392388] team0: Port device team_slave_0 added [ 79.419436] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 79.433189] team0: Port device team_slave_0 added [ 79.450516] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 79.467897] team0: Port device team_slave_0 added [ 79.483931] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 79.499629] team0: Port device team_slave_1 added [ 79.518373] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 79.531957] team0: Port device team_slave_1 added [ 79.568068] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 79.577571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.594014] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.622149] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 79.636851] team0: Port device team_slave_1 added [ 79.657463] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 79.669977] team0: Port device team_slave_0 added [ 79.679906] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 79.688974] team0: Port device team_slave_1 added [ 79.700839] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 79.711283] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 79.719165] team0: Port device team_slave_1 added [ 79.731473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.750592] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.785288] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 79.797382] team0: Port device team_slave_1 added [ 79.820897] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 79.829670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.854132] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.883203] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 79.891109] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 79.899293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.918431] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.934130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.949997] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.977393] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 79.996850] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 80.006513] team0: Port device team_slave_1 added [ 80.024699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.039537] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.055511] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.077316] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 80.085287] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 80.093442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.104824] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.115388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.124728] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.133507] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 80.142123] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 80.159690] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 80.167888] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 80.177514] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 80.185112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.201499] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.232709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.274328] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.298676] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.316981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.334979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.342848] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.350716] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.358761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.367928] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 80.375984] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.384671] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.413555] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 80.432203] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 80.439956] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 80.448016] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 80.458792] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 80.466568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.486013] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.528239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.551506] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.567658] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.578771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.586767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.594811] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.602615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.610860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.619195] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 80.626589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.635680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.645622] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 80.656803] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.665444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.696498] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 80.706736] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 80.714327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.730494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.754735] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.773144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.791972] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 80.801587] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 80.815571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.840862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.864834] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.880507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.894794] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 80.902702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.911317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.953149] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 80.961177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.978489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.996550] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 81.004989] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 81.034329] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 81.042500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.056639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.082306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.109200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.136831] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.170455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.179616] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 81.187409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.196636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.028626] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.035112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.042201] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.048677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.089109] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 83.096640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.137599] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.144160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.150995] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.157437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.197392] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 83.205500] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.211966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.218795] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.225243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.241476] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 83.315341] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.321827] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.328663] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.335132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.386832] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 83.407469] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.414091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.420907] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.427377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.470949] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 83.501674] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.508234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.515083] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.521520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.532842] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 83.544289] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.550734] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.557549] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.563975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.572971] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 83.792691] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.799166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.806110] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.812663] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.852962] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 84.127200] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.142413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.179870] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.215172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.244802] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.256855] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.264328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 91.740717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.820319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.944932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.983997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.037589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.092879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.319010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.401466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.529564] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 92.674667] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 92.740734] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 92.779820] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 92.810698] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 92.845963] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 93.136808] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 93.227526] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 93.351098] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 93.357455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.368539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.456172] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 93.462533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.477259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.534361] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 93.540974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.551177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.618758] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 93.626123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.637825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.668075] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 93.675802] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 93.698420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.733280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.756521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.780816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.040666] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 94.047134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.059097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.211792] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.250915] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 94.261142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.275302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.361359] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.419020] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.466700] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.491074] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.528665] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.914367] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.020821] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.431779] ================================================================== [ 100.439181] BUG: KMSAN: uninit-value in _copy_to_iter+0x45f/0x2800 [ 100.445503] CPU: 0 PID: 6609 Comm: syz-executor5 Not tainted 4.17.0-rc5+ #103 [ 100.453120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 100.462478] Call Trace: [ 100.465085] dump_stack+0x185/0x1d0 [ 100.468739] ? kmsan_internal_check_memory+0x116/0x1e0 [ 100.474048] kmsan_report+0x149/0x260 [ 100.477941] kmsan_internal_check_memory+0x135/0x1e0 [ 100.483047] kmsan_copy_to_user+0x75/0x160 [ 100.487378] ? _copy_to_iter+0x92/0x2800 [ 100.491433] _copy_to_iter+0x45f/0x2800 [ 100.495417] ? finish_wait+0x10a/0x3e0 [ 100.499314] vhost_chr_read_iter+0x7b3/0xc30 [ 100.503725] ? init_wait_entry+0x1a0/0x1a0 [ 100.507962] vhost_net_chr_read_iter+0xf6/0x130 [ 100.512630] ? vhost_net_exit+0x30/0x30 [ 100.516595] do_iter_readv_writev+0x84d/0xa00 [ 100.521092] ? vhost_net_exit+0x30/0x30 [ 100.525052] do_iter_read+0x303/0xd70 [ 100.528858] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 100.534304] do_readv+0x295/0x5f0 [ 100.537768] __x64_sys_readv+0xe1/0x120 [ 100.541735] do_syscall_64+0x152/0x230 [ 100.545633] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 100.550837] RIP: 0033:0x455a09 [ 100.554100] RSP: 002b:00007f1004c8fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 100.561982] RAX: ffffffffffffffda RBX: 00007f1004c906d4 RCX: 0000000000455a09 [ 100.569236] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000014 [ 100.576501] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 100.583769] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 100.591026] R13: 000000000000056b R14: 00000000006fd2a8 R15: 0000000000000000 [ 100.598286] [ 100.599895] Uninit was created at: [ 100.603427] kmsan_internal_poison_shadow+0xb8/0x1b0 [ 100.608525] kmsan_kmalloc+0x94/0x100 [ 100.612306] __kmalloc+0x141/0x350 [ 100.615831] translate_desc+0xbef/0x1120 [ 100.619877] vhost_update_used_flags+0x469/0x8d0 [ 100.624620] vhost_vq_init_access+0x173/0xa20 [ 100.629105] vhost_net_ioctl+0x2212/0x3450 [ 100.633327] do_vfs_ioctl+0xaf8/0x2410 [ 100.637226] __x64_sys_ioctl+0x280/0x320 [ 100.641275] do_syscall_64+0x152/0x230 [ 100.645159] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 100.650325] [ 100.651935] Bytes 4-7 of 72 are uninitialized [ 100.656423] Memory access starts at ffff88013b01cf00 [ 100.661515] ================================================================== [ 100.668865] Disabling lock debugging due to kernel taint [ 100.674313] Kernel panic - not syncing: panic_on_warn set ... [ 100.674313] [ 100.681668] CPU: 0 PID: 6609 Comm: syz-executor5 Tainted: G B 4.17.0-rc5+ #103 [ 100.690409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 100.699747] Call Trace: [ 100.702331] dump_stack+0x185/0x1d0 [ 100.705958] panic+0x39d/0x940 [ 100.709153] ? kmsan_internal_check_memory+0x116/0x1e0 [ 100.714422] kmsan_report+0x260/0x260 [ 100.718215] kmsan_internal_check_memory+0x135/0x1e0 [ 100.723316] kmsan_copy_to_user+0x75/0x160 [ 100.727545] ? _copy_to_iter+0x92/0x2800 [ 100.731593] _copy_to_iter+0x45f/0x2800 [ 100.735550] ? finish_wait+0x10a/0x3e0 [ 100.739435] vhost_chr_read_iter+0x7b3/0xc30 [ 100.743829] ? init_wait_entry+0x1a0/0x1a0 [ 100.748058] vhost_net_chr_read_iter+0xf6/0x130 [ 100.752713] ? vhost_net_exit+0x30/0x30 [ 100.756679] do_iter_readv_writev+0x84d/0xa00 [ 100.762436] ? vhost_net_exit+0x30/0x30 [ 100.766404] do_iter_read+0x303/0xd70 [ 100.770189] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 100.775637] do_readv+0x295/0x5f0 [ 100.779084] __x64_sys_readv+0xe1/0x120 [ 100.783052] do_syscall_64+0x152/0x230 [ 100.786937] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 100.792197] RIP: 0033:0x455a09 [ 100.795369] RSP: 002b:00007f1004c8fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 100.803060] RAX: ffffffffffffffda RBX: 00007f1004c906d4 RCX: 0000000000455a09 [ 100.810313] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000014 [ 100.817657] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 100.824912] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 100.832189] R13: 000000000000056b R14: 00000000006fd2a8 R15: 0000000000000000 [ 100.840072] Dumping ftrace buffer: [ 100.843598] (ftrace buffer empty) [ 100.847297] Kernel Offset: disabled [ 100.850902] Rebooting in 86400 seconds..