[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 31.977443] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 34.208111] random: sshd: uninitialized urandom read (32 bytes read) [ 34.644921] random: sshd: uninitialized urandom read (32 bytes read) [ 36.037925] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.14' (ECDSA) to the list of known hosts. [ 41.600884] random: sshd: uninitialized urandom read (32 bytes read) 2018/05/12 13:41:35 fuzzer started 2018/05/12 13:41:36 dialing manager at 10.128.0.26:41643 [ 64.648660] can: request_module (can-proto-0) failed. [ 64.660328] can: request_module (can-proto-0) failed. 2018/05/12 13:42:00 kcov=true, comps=false 2018/05/12 13:42:05 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000eccfa8)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000019c0)=[{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001740)='m', 0x1}], 0x1, &(0x7f00000018c0)=[@assoc={0x18, 0x117, 0x4, 0x3f}], 0x18, 0x10}], 0x1, 0x0) 2018/05/12 13:42:05 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x10000000000003, 0x2c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x9}, 0x1c) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000080)}, 0xc100) write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="7f45"], 0x2) 2018/05/12 13:42:05 executing program 7: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c626262c8523bf012cf66f") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000000)=[{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000680)="f2", 0x1}, {&(0x7f0000001780)="654086a63664410add73efef8fd6f3fcb1c1a477a29da2f6b47e5efc348cfb87c2f7f0421c6f9a9e0c05d8836187a2f46ffe5c5e32641db052e76a33332b79bd0f5890bab6fce5d6097aa42ee512193935aec818b37d0e85aa88b497e7ede9f955e745c2d7a8", 0x66}], 0x2, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) 2018/05/12 13:42:05 executing program 2: r0 = socket(0x0, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec") mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000432fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000013000/0x4000)=nil, 0x4000}, 0x1}) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") madvise(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x10) madvise(&(0x7f0000008000/0x3000)=nil, 0x3000, 0x11) r3 = socket$netlink(0x10, 0x3, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000140)={0x1}) fcntl$lock(r3, 0x26, &(0x7f0000013000)) r4 = add_key(&(0x7f0000000040)='syzkaller\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, &(0x7f00000000c0), 0x0, 0xfffffffffffffffe) keyctl$assume_authority(0x10, r4) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000012000/0x4000)=nil, 0x4000}) dup2(r3, r1) 2018/05/12 13:42:05 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") r1 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)={'vhan0\x00', 0x400}) r2 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000200)={"0500000000e700", 0x200}) 2018/05/12 13:42:05 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/40, 0x28}], 0x1) 2018/05/12 13:42:05 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") r1 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) fallocate(r1, 0x0, 0x4b99, 0x5) sendfile(r1, r1, &(0x7f0000000040), 0xab92) preadv(r1, &(0x7f0000001a80)=[{&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f0000001980)=""/160, 0xa0}], 0x2, 0x0) 2018/05/12 13:42:05 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) poll(&(0x7f0000000140)=[{r1}, {r1}, {r1}], 0x3, 0x0) [ 72.689328] IPVS: ftp: loaded support on port[0] = 21 [ 72.766646] IPVS: ftp: loaded support on port[0] = 21 [ 72.820893] IPVS: ftp: loaded support on port[0] = 21 [ 72.832169] IPVS: ftp: loaded support on port[0] = 21 [ 72.882339] IPVS: ftp: loaded support on port[0] = 21 [ 72.885642] IPVS: ftp: loaded support on port[0] = 21 [ 72.895111] IPVS: ftp: loaded support on port[0] = 21 [ 72.914614] IPVS: ftp: loaded support on port[0] = 21 [ 74.938216] ip (4726) used greatest stack depth: 54456 bytes left [ 74.944571] ip (4727) used greatest stack depth: 54384 bytes left [ 76.035486] ip (4810) used greatest stack depth: 54344 bytes left [ 76.227603] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.234130] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.253326] device bridge_slave_0 entered promiscuous mode [ 76.411407] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.417935] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.460213] device bridge_slave_0 entered promiscuous mode [ 76.484485] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.490965] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.506330] device bridge_slave_1 entered promiscuous mode [ 76.517159] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.523690] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.540139] device bridge_slave_0 entered promiscuous mode [ 76.574991] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.581541] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.602258] device bridge_slave_0 entered promiscuous mode [ 76.627634] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.634134] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.667206] device bridge_slave_0 entered promiscuous mode [ 76.687186] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.693727] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.708578] device bridge_slave_0 entered promiscuous mode [ 76.721227] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.727701] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.758215] device bridge_slave_1 entered promiscuous mode [ 76.783208] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.789676] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.804302] device bridge_slave_1 entered promiscuous mode [ 76.812414] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 76.823571] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.830185] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.849230] device bridge_slave_0 entered promiscuous mode [ 76.865927] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.872399] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.890884] device bridge_slave_1 entered promiscuous mode [ 76.912666] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.919236] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.936895] device bridge_slave_1 entered promiscuous mode [ 76.949821] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.956317] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.973616] device bridge_slave_1 entered promiscuous mode [ 76.981715] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 76.992558] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.999111] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.035608] device bridge_slave_0 entered promiscuous mode [ 77.056490] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.062985] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.087272] device bridge_slave_1 entered promiscuous mode [ 77.106423] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 77.116314] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 77.129866] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 77.138295] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 77.148097] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 77.166289] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 77.235378] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.241884] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.293153] device bridge_slave_1 entered promiscuous mode [ 77.321518] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 77.330334] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 77.353056] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 77.392738] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 77.400554] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 77.493193] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 77.569240] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 77.717529] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 77.778463] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 77.798895] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 77.938270] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 77.960732] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 78.038400] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 78.064082] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 78.078931] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 78.111660] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 78.199090] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 78.206149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.228311] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 78.256715] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 78.267698] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 78.296794] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 78.356881] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 78.363907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.387147] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 78.411604] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 78.418629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.443400] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 78.455145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.482696] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 78.493133] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 78.503432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.531544] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 78.539603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.588934] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 78.602528] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 78.609584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.648764] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 78.655815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.712412] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 78.719632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.747674] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 78.760524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.775588] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 78.784583] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 78.806516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.874895] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 78.881901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.983342] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 79.001219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.022664] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 79.031079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.123244] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 79.132205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.151744] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 79.173295] team0: Port device team_slave_0 added [ 79.267337] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 79.274436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.326017] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 79.351644] team0: Port device team_slave_0 added [ 79.378933] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 79.404159] team0: Port device team_slave_1 added [ 79.437083] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 79.450631] team0: Port device team_slave_0 added [ 79.488541] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 79.508089] team0: Port device team_slave_0 added [ 79.537886] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 79.560096] team0: Port device team_slave_1 added [ 79.579400] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 79.590388] team0: Port device team_slave_0 added [ 79.637359] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 79.644418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.659008] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.709209] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 79.731212] team0: Port device team_slave_1 added [ 79.746656] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 79.762174] team0: Port device team_slave_1 added [ 79.784307] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 79.794836] team0: Port device team_slave_0 added [ 79.809871] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 79.839977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.858660] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.889615] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 79.906361] team0: Port device team_slave_1 added [ 79.922734] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 79.930381] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 79.947415] team0: Port device team_slave_0 added [ 79.969282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.986954] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.016129] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 80.023751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.037937] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.053409] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 80.061930] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 80.072947] team0: Port device team_slave_0 added [ 80.079628] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 80.089786] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 80.105141] team0: Port device team_slave_1 added [ 80.122733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.131956] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.168762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.192196] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.217663] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 80.228460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.237915] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.250907] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 80.266259] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 80.280306] team0: Port device team_slave_1 added [ 80.286425] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 80.296108] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 80.305452] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 80.315131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.323832] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.359317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.387435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.402869] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.419202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.431770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.439786] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.448378] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 80.455923] team0: Port device team_slave_1 added [ 80.463528] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 80.474301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.484687] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.515329] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 80.525464] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 80.532844] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.542609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.563578] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.578774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.601566] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 80.611193] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 80.620210] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 80.627770] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.636533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.660926] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.679951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.697526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.718966] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.730122] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 80.738340] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 80.760185] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 80.768172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.778998] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.800017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.827203] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.845322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.854566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.868274] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 80.894637] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 80.905795] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 80.919402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.930826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.949752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.975507] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.004609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.024235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.044413] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 81.053913] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 81.078175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.088455] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.103362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.118601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.143923] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 81.151445] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.189202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.222137] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 81.230561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.243408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.285144] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 81.294698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.325947] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.349707] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 81.361081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.385393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.408101] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 81.417486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.439189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.509088] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 81.516688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.534667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.793872] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 81.801837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.814183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.245286] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.251895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.258773] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.265235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.285497] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 83.298155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.323011] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.329564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.336451] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.342923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.392514] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 83.419709] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.426204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.433130] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.439598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.496188] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 83.576429] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.582920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.589810] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.596263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.637110] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 83.714357] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.720878] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.727740] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.734573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.798882] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 83.998955] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.005461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.012347] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.018875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.029907] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 84.038101] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.044580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.051456] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.057924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.066631] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 84.096388] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.102876] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.109739] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.116212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.137397] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 84.320665] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.336712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.367082] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.379647] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.387663] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.395652] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.403630] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.700276] ip (5700) used greatest stack depth: 54152 bytes left [ 91.918837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.062470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.625897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.701161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.731091] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 92.768887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.939207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.974956] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 93.003647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.262426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.468934] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 93.531321] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 93.559833] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 93.630116] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 93.636425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.644577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.774434] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 93.780737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.799193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.838574] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 93.850962] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 94.047210] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 94.336885] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 94.343232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.355378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.408829] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 94.415298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.427906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.478107] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.503291] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 94.509679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.538338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.596933] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 94.603590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.625168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.731324] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.822910] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 94.829243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.839902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.948545] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 94.954848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.968300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.273697] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.304110] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.439582] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.572140] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.709327] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.824273] 8021q: adding VLAN 0 to HW filter on device team0 2018/05/12 13:42:33 executing program 5: r0 = socket(0x10, 0x802, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") r1 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)}, {&(0x7f00000000c0)=""/69, 0x45}], 0x2, 0x0) [ 99.669896] ================================================================== [ 99.677340] BUG: KMSAN: uninit-value in pointer+0x11e5/0x1410 [ 99.683241] CPU: 0 PID: 6562 Comm: syz-executor5 Not tainted 4.17.0-rc3+ #88 [ 99.690433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 99.699794] Call Trace: [ 99.702393] dump_stack+0x185/0x1d0 [ 99.706065] ? pointer+0x11e5/0x1410 [ 99.709798] kmsan_report+0x142/0x240 [ 99.713616] __msan_warning_32+0x6c/0xb0 [ 99.717686] ? futex_wait_queue_me+0x391/0x710 [ 99.722274] pointer+0x11e5/0x1410 [ 99.725824] ? futex_wait_queue_me+0x470/0x710 [ 99.730416] vsnprintf+0xa2d/0x33c0 [ 99.734064] seq_printf+0x29f/0x420 [ 99.737744] ? save_stack_trace_tsk+0x26a/0x2f0 [ 99.742590] ? futex_wait_queue_me+0x470/0x710 [ 99.747179] ? futex_wait_queue_me+0x470/0x710 [ 99.751759] ? futex_wait_queue_me+0x470/0x710 [ 99.756348] proc_pid_stack+0x326/0x470 [ 99.760328] proc_single_show+0x1af/0x300 [ 99.764486] ? proc_pid_wchan+0x200/0x200 [ 99.768638] ? proc_single_open+0x90/0x90 [ 99.772787] seq_read+0xc7d/0x2260 [ 99.776346] do_iter_read+0x880/0xd70 [ 99.780159] ? seq_open+0x380/0x380 [ 99.783799] do_preadv+0x3a1/0x580 [ 99.787356] __x64_sys_preadv+0x120/0x170 [ 99.791511] do_syscall_64+0x154/0x220 [ 99.795406] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 99.800594] RIP: 0033:0x455979 [ 99.803784] RSP: 002b:00007f7a995a8c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 99.811499] RAX: ffffffffffffffda RBX: 00007f7a995a96d4 RCX: 0000000000455979 [ 99.818776] RDX: 0000000000000002 RSI: 0000000020000140 RDI: 0000000000000014 [ 99.826050] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 99.833331] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 99.840610] R13: 0000000000000522 R14: 00000000006fbbd0 R15: 0000000000000000 [ 99.847885] [ 99.849505] Uninit was stored to memory at: [ 99.853843] kmsan_internal_chain_origin+0x12b/0x210 [ 99.858952] __msan_chain_origin+0x69/0xc0 [ 99.863209] __save_stack_trace+0x829/0xb00 [ 99.867533] save_stack_trace_tsk+0x258/0x2f0 [ 99.872034] proc_pid_stack+0x26a/0x470 [ 99.876018] proc_single_show+0x1af/0x300 [ 99.880177] seq_read+0xc7d/0x2260 [ 99.883716] do_iter_read+0x880/0xd70 [ 99.887522] do_preadv+0x3a1/0x580 [ 99.891071] __x64_sys_preadv+0x120/0x170 [ 99.895225] do_syscall_64+0x154/0x220 [ 99.899813] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 99.904999] Uninit was stored to memory at: [ 99.909348] kmsan_internal_chain_origin+0x12b/0x210 [ 99.914461] __msan_chain_origin+0x69/0xc0 [ 99.918706] update_stack_state+0x959/0xa40 [ 99.923036] unwind_next_frame+0x618/0xe50 [ 99.927281] __save_stack_trace+0x734/0xb00 [ 99.931609] save_stack_trace_tsk+0x258/0x2f0 [ 99.936111] proc_pid_stack+0x26a/0x470 [ 99.940089] proc_single_show+0x1af/0x300 [ 99.944275] seq_read+0xc7d/0x2260 [ 99.947819] do_iter_read+0x880/0xd70 [ 99.951626] do_preadv+0x3a1/0x580 [ 99.955173] __x64_sys_preadv+0x120/0x170 [ 99.959326] do_syscall_64+0x154/0x220 [ 99.963216] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 99.968399] Local variable description: ----ug.i@mem_cgroup_uncharge_list [ 99.975315] Variable was created at: [ 99.979043] mem_cgroup_uncharge_list+0x42/0x1e0 [ 99.983804] release_pages+0x1647/0x1670 [ 99.987858] ================================================================== [ 99.995206] Disabling lock debugging due to kernel taint [ 100.001695] Kernel panic - not syncing: panic_on_warn set ... [ 100.001695] [ 100.009072] CPU: 0 PID: 6562 Comm: syz-executor5 Tainted: G B 4.17.0-rc3+ #88 [ 100.017649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 100.027010] Call Trace: [ 100.029610] dump_stack+0x185/0x1d0 [ 100.033253] panic+0x39d/0x940 [ 100.036477] ? pointer+0x11e5/0x1410 [ 100.042989] kmsan_report+0x238/0x240 [ 100.046799] __msan_warning_32+0x6c/0xb0 [ 100.050866] ? futex_wait_queue_me+0x391/0x710 [ 100.055460] pointer+0x11e5/0x1410 [ 100.059018] ? futex_wait_queue_me+0x470/0x710 [ 100.063609] vsnprintf+0xa2d/0x33c0 [ 100.067254] seq_printf+0x29f/0x420 [ 100.070909] ? save_stack_trace_tsk+0x26a/0x2f0 [ 100.075587] ? futex_wait_queue_me+0x470/0x710 [ 100.080201] ? futex_wait_queue_me+0x470/0x710 [ 100.084789] ? futex_wait_queue_me+0x470/0x710 [ 100.089376] proc_pid_stack+0x326/0x470 [ 100.093359] proc_single_show+0x1af/0x300 [ 100.097518] ? proc_pid_wchan+0x200/0x200 [ 100.101672] ? proc_single_open+0x90/0x90 [ 100.105826] seq_read+0xc7d/0x2260 [ 100.109385] do_iter_read+0x880/0xd70 [ 100.113196] ? seq_open+0x380/0x380 [ 100.116832] do_preadv+0x3a1/0x580 [ 100.120388] __x64_sys_preadv+0x120/0x170 [ 100.124543] do_syscall_64+0x154/0x220 [ 100.128444] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 100.133637] RIP: 0033:0x455979 [ 100.136825] RSP: 002b:00007f7a995a8c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 100.144536] RAX: ffffffffffffffda RBX: 00007f7a995a96d4 RCX: 0000000000455979 [ 100.151806] RDX: 0000000000000002 RSI: 0000000020000140 RDI: 0000000000000014 [ 100.159083] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 100.166356] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 100.173626] R13: 0000000000000522 R14: 00000000006fbbd0 R15: 0000000000000000 [ 100.181480] Dumping ftrace buffer: [ 100.185021] (ftrace buffer empty) [ 100.188707] Kernel Offset: disabled [ 100.192313] Rebooting in 86400 seconds..