[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 27.217313] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 32.807782] random: sshd: uninitialized urandom read (32 bytes read) [ 33.147257] random: sshd: uninitialized urandom read (32 bytes read) [ 34.479577] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.14' (ECDSA) to the list of known hosts. [ 40.108765] random: sshd: uninitialized urandom read (32 bytes read) 2018/06/26 12:33:03 fuzzer started [ 41.067256] random: cc1: uninitialized urandom read (8 bytes read) 2018/06/26 12:33:04 dialing manager at 10.128.0.26:33159 2018/06/26 12:33:04 checking revisions... 2018/06/26 12:33:04 testing simple program... [ 41.779863] IPVS: ftp: loaded support on port[0] = 21 [ 41.999153] ip (4487) used greatest stack depth: 54328 bytes left [ 42.056335] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.062734] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.070085] device bridge_slave_0 entered promiscuous mode [ 42.103688] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.110122] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.117427] device bridge_slave_1 entered promiscuous mode [ 42.151516] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 42.185334] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 42.280860] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 42.317457] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 42.469097] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 42.476388] team0: Port device team_slave_0 added [ 42.507608] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 42.514739] team0: Port device team_slave_1 added [ 42.546464] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 42.581959] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 42.617961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.654402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.981719] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.988121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.994877] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.001286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.009134] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 43.935168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.184618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.296229] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 44.303781] ip (4646) used greatest stack depth: 54120 bytes left [ 44.413382] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 44.419624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.427788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.539067] 8021q: adding VLAN 0 to HW filter on device team0 executing program executing program executing program executing program executing program executing program executing program [ 62.862985] can: request_module (can-proto-0) failed. [ 62.873705] can: request_module (can-proto-0) failed. 2018/06/26 12:33:27 syscalls: 1517 2018/06/26 12:33:27 code coverage: enabled 2018/06/26 12:33:27 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: errno 524 2018/06/26 12:33:27 setuid sandbox: enabled 2018/06/26 12:33:27 namespace sandbox: enabled 2018/06/26 12:33:27 fault injection: enabled 2018/06/26 12:33:27 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/06/26 12:33:27 net packed injection: enabled 12:33:27 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv4_newrule={0x30, 0x20, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@FRA_FLOW={0x8, 0xb}, @FRA_GENERIC_POLICY=@FRA_TABLE={0x8, 0xf}]}, 0x30}, 0x1}, 0x0) 12:33:27 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000b86000)={0x0, &(0x7f0000f40ff8)}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000d1c000), 0x4) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) 12:33:27 executing program 7: unshare(0x24020400) r0 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x57000)=nil, 0x57000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt$netlink(r0, 0x10e, 0x3, &(0x7f0000000040)=""/8, &(0x7f0000706ffc)=0x8) 12:33:27 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x20, 0x0) close(r1) 12:33:27 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800000000004, 0x20011, r0, 0x0) perf_event_open(&(0x7f0000000600)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:33:27 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000078dff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time={0x77359400}}], 0x1c) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f0000000000)='./control/file0\x00') getdents(r0, &(0x7f0000000000), 0xffffffffffffff3b) getdents(r0, &(0x7f00000000c0)=""/226, 0xe2) dup2(r0, r1) 12:33:27 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000000)) 12:33:27 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000939000)=0x400000019) dup3(r1, r0, 0x0) [ 65.502601] IPVS: ftp: loaded support on port[0] = 21 [ 65.506497] IPVS: ftp: loaded support on port[0] = 21 [ 65.592930] IPVS: ftp: loaded support on port[0] = 21 [ 65.596118] IPVS: ftp: loaded support on port[0] = 21 [ 65.603150] IPVS: ftp: loaded support on port[0] = 21 [ 65.606354] IPVS: ftp: loaded support on port[0] = 21 [ 65.630054] IPVS: ftp: loaded support on port[0] = 21 [ 65.664154] IPVS: ftp: loaded support on port[0] = 21 [ 68.613560] ip (5046) used greatest stack depth: 54056 bytes left [ 68.843147] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.849604] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.871889] device bridge_slave_0 entered promiscuous mode [ 68.906659] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.913111] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.941126] device bridge_slave_0 entered promiscuous mode [ 68.960954] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.967384] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.984252] device bridge_slave_0 entered promiscuous mode [ 69.038613] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.045110] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.066222] device bridge_slave_1 entered promiscuous mode [ 69.082687] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.089122] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.119405] device bridge_slave_0 entered promiscuous mode [ 69.144151] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.150552] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.167371] device bridge_slave_1 entered promiscuous mode [ 69.179299] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.185757] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.198482] device bridge_slave_0 entered promiscuous mode [ 69.214208] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.220652] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.241983] device bridge_slave_0 entered promiscuous mode [ 69.254769] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.261240] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.282276] device bridge_slave_1 entered promiscuous mode [ 69.291618] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.298107] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.308901] device bridge_slave_0 entered promiscuous mode [ 69.317382] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 69.328379] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 69.339139] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.345578] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.362304] device bridge_slave_0 entered promiscuous mode [ 69.379444] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.385894] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.419443] device bridge_slave_1 entered promiscuous mode [ 69.437207] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.443701] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.457327] device bridge_slave_1 entered promiscuous mode [ 69.477518] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 69.485934] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 69.498464] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.504946] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.529094] device bridge_slave_1 entered promiscuous mode [ 69.550456] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.556924] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.592286] device bridge_slave_1 entered promiscuous mode [ 69.607186] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 69.617321] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 69.634793] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 69.643310] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.649777] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.694522] device bridge_slave_1 entered promiscuous mode [ 69.741750] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 69.749895] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 69.802833] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 69.810831] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 69.832162] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 69.902527] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 69.969946] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 70.006948] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 70.094006] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 70.152093] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 70.233792] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 70.333303] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 70.390782] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 70.462024] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 70.477862] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 70.488348] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 70.541664] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 70.552954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.588569] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 70.665822] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 70.676369] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 70.687834] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 70.695942] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 70.710460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.743190] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 70.755761] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 70.844438] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 70.865596] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 70.904581] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 70.911599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.941968] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 70.948955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.001237] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 71.013096] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 71.020186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.051219] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 71.058180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.074695] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 71.081686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.130340] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 71.138113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.172412] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 71.179458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.226557] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 71.243301] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 71.250378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.264378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.324178] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 71.331207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.350973] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 71.358719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.476654] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 71.483684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.507904] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 71.535704] team0: Port device team_slave_0 added [ 71.641613] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 71.664767] team0: Port device team_slave_0 added [ 71.742491] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 71.764820] team0: Port device team_slave_0 added [ 71.785630] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 71.800847] team0: Port device team_slave_1 added [ 71.835104] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 71.850936] team0: Port device team_slave_1 added [ 71.866948] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 71.881471] team0: Port device team_slave_0 added [ 71.939015] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 71.968213] team0: Port device team_slave_0 added [ 71.982567] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 71.994929] team0: Port device team_slave_1 added [ 72.017379] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 72.031554] team0: Port device team_slave_0 added [ 72.037217] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 72.044259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.056976] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.080402] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 72.096429] team0: Port device team_slave_1 added [ 72.124346] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 72.131535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.156519] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.181293] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 72.197421] team0: Port device team_slave_0 added [ 72.213505] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 72.227397] team0: Port device team_slave_1 added [ 72.233200] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 72.251362] team0: Port device team_slave_0 added [ 72.258516] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 72.281412] team0: Port device team_slave_1 added [ 72.295426] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 72.306177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.321336] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.338176] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 72.346964] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 72.354609] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 72.362277] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 72.369899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.390694] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.409905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.437055] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.467647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.485294] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.504800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.512956] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.524579] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 72.531842] team0: Port device team_slave_1 added [ 72.545862] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 72.554283] team0: Port device team_slave_1 added [ 72.567521] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 72.581834] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 72.589324] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 72.601228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.613165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.651395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.678579] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.694659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.702795] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.713010] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 72.720754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.729549] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.739843] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 72.766291] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 72.775340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.790497] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.804725] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.825678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.835980] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 72.843862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.852675] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.865991] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 72.879068] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 72.889955] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 72.897843] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 72.907251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.928013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.949655] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.979314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.000673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.021008] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.029627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.037743] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.049405] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 73.068008] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 73.084246] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 73.092512] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 73.099557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.128670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.156854] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.176144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.198768] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.218210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.227408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.235586] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.245738] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 73.253968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.263968] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.289505] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 73.298689] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 73.307944] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 73.315839] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.335607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.365458] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.393167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.406679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.427607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.437838] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 73.447603] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 73.468189] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.488401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.513013] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.529111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.548562] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 73.556754] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.567956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.579609] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 73.599494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.617582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.641828] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 73.663599] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.695860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.809810] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 73.817605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.829137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.356351] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.362831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.369590] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.376007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.411499] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 75.423971] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.624130] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.630578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.637361] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.643766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.657197] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 75.672478] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.678879] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.685615] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.692014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.702153] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 75.727096] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.733525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.740284] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.746701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.840720] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 75.868303] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.874734] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.881509] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.887912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.903649] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 75.949163] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.955629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.962422] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.968845] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.050790] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 76.100481] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.106933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.113731] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.120150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.208013] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 76.227538] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.233979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.240748] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.247191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.260878] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 76.455284] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.471333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.489666] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.502201] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.510286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.526251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.534301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.247956] ================================================================== [ 81.255366] BUG: KMSAN: uninit-value in get_page_from_freelist+0x5f24/0xb740 [ 81.262551] CPU: 1 PID: 4802 Comm: syz-executor2 Not tainted 4.17.0+ #9 [ 81.269295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 81.278640] Call Trace: [ 81.281225] dump_stack+0x185/0x1d0 [ 81.284850] kmsan_report+0x188/0x2a0 [ 81.288652] __msan_warning_32+0x70/0xc0 [ 81.292707] get_page_from_freelist+0x5f24/0xb740 [ 81.297561] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 81.302931] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 81.308293] ? __module_address+0x6a/0x600 [ 81.312530] ? kmsan_set_origin_inline+0x6b/0x120 [ 81.317373] ? __msan_poison_alloca+0x15c/0x1d0 [ 81.322052] __alloc_pages_nodemask+0x792/0x5cc0 [ 81.326809] ? __is_insn_slot_addr+0x198/0x1c0 [ 81.331395] ? kernel_text_address+0x34d/0x3a0 [ 81.335982] ? __kernel_text_address+0x34/0xe0 [ 81.340566] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 81.346020] ? __save_stack_trace+0x90d/0xb00 [ 81.350529] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 81.355905] alloc_pages_current+0x6b1/0x970 [ 81.360326] get_zeroed_page+0x3f/0xd0 [ 81.364217] __pud_alloc+0xab/0x440 [ 81.367848] ? copy_process+0x6d9b/0x9be0 [ 81.372005] copy_page_range+0x3c1a/0x3f50 [ 81.376255] ? __rb_insert_augmented+0xd5a/0x13f0 [ 81.381112] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 81.386488] ? init_admin_reserve+0x160/0x160 [ 81.390995] ? __vma_link_rb+0xbd3/0xc90 [ 81.395074] copy_process+0x6d9b/0x9be0 [ 81.399073] _do_fork+0x353/0xf60 [ 81.402539] __x64_sys_clone+0x15e/0x1b0 [ 81.406616] ? __ia32_sys_vfork+0x70/0x70 [ 81.410774] do_syscall_64+0x15b/0x230 [ 81.414666] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 81.419859] RIP: 0033:0x41f8b9 [ 81.423050] RSP: 002b:0000000000a3fad0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 81.430763] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000041f8b9 [ 81.438036] RDX: 0000000000a3fadc RSI: 0000000000000000 RDI: 0000000000100011 [ 81.445310] RBP: 0000000000a3fc80 R08: 0000000000a44a60 R09: 000000000000001a [ 81.452587] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000a3feb0 [ 81.459860] R13: 0000000000a3fe28 R14: 0000000000000000 R15: 0000000000000000 [ 81.467132] [ 81.468757] Uninit was stored to memory at: [ 81.473090] kmsan_internal_chain_origin+0x12b/0x210 [ 81.478200] __msan_chain_origin+0x69/0xc0 [ 81.482442] free_unref_page_commit+0x4bc/0x4d0 [ 81.487114] free_pages+0x290/0x320 [ 81.490745] tlb_finish_mmu+0x3f7/0x5c0 [ 81.494718] exit_mmap+0x539/0x980 [ 81.498261] __mmput+0x158/0x600 [ 81.501628] mmput+0xab/0xf0 [ 81.504641] exit_mm+0x6ed/0x7a0 [ 81.508005] do_exit+0xc12/0x3930 [ 81.511457] do_group_exit+0x1a0/0x360 [ 81.515337] __do_sys_exit_group+0x21/0x30 [ 81.519570] __se_sys_exit_group+0x14/0x20 [ 81.523802] __x64_sys_exit_group+0x4c/0x50 [ 81.528117] do_syscall_64+0x15b/0x230 [ 81.532003] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 81.537176] [ 81.538789] Uninit was stored to memory at: [ 81.543106] kmsan_internal_chain_origin+0x12b/0x210 [ 81.548201] __msan_chain_origin+0x69/0xc0 [ 81.552433] unmap_page_range+0xeb4/0x3be0 [ 81.556658] unmap_single_vma+0x445/0x5e0 [ 81.560797] unmap_vmas+0x1f4/0x360 [ 81.564418] exit_mmap+0x4d7/0x980 [ 81.567950] __mmput+0x158/0x600 [ 81.571310] mmput+0xab/0xf0 [ 81.574326] exit_mm+0x6ed/0x7a0 [ 81.577689] do_exit+0xc12/0x3930 [ 81.581140] do_group_exit+0x1a0/0x360 [ 81.585018] __do_sys_exit_group+0x21/0x30 [ 81.589252] __se_sys_exit_group+0x14/0x20 [ 81.593482] __x64_sys_exit_group+0x4c/0x50 [ 81.597802] do_syscall_64+0x15b/0x230 [ 81.601681] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 81.606852] [ 81.608464] Uninit was stored to memory at: [ 81.612787] kmsan_internal_chain_origin+0x12b/0x210 [ 81.617883] __msan_chain_origin+0x69/0xc0 [ 81.622111] free_unref_page_commit+0x4bc/0x4d0 [ 81.626771] free_pages+0x290/0x320 [ 81.630388] tlb_finish_mmu+0x3f7/0x5c0 [ 81.634358] exit_mmap+0x539/0x980 [ 81.637894] __mmput+0x158/0x600 [ 81.641257] mmput+0xab/0xf0 [ 81.644268] exit_mm+0x6ed/0x7a0 [ 81.647627] do_exit+0xc12/0x3930 [ 81.651076] do_group_exit+0x1a0/0x360 [ 81.654955] __do_sys_exit_group+0x21/0x30 [ 81.659188] __se_sys_exit_group+0x14/0x20 [ 81.663417] __x64_sys_exit_group+0x4c/0x50 [ 81.667734] do_syscall_64+0x15b/0x230 [ 81.671613] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 81.676788] [ 81.678403] Local variable description: ----tlb@exit_mmap [ 81.683925] Variable was created at: [ 81.687634] exit_mmap+0x47/0x980 [ 81.691077] __mmput+0x158/0x600 [ 81.694428] ================================================================== [ 81.701773] Disabling lock debugging due to kernel taint [ 81.707211] Kernel panic - not syncing: panic_on_warn set ... [ 81.707211] [ 81.714573] CPU: 1 PID: 4802 Comm: syz-executor2 Tainted: G B 4.17.0+ #9 [ 81.722704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 81.732049] Call Trace: [ 81.734636] dump_stack+0x185/0x1d0 [ 81.738261] panic+0x3d0/0x990 [ 81.741459] kmsan_report+0x29e/0x2a0 [ 81.745258] __msan_warning_32+0x70/0xc0 [ 81.749319] get_page_from_freelist+0x5f24/0xb740 [ 81.754174] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 81.759543] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 81.764901] ? __module_address+0x6a/0x600 [ 81.769144] ? kmsan_set_origin_inline+0x6b/0x120 [ 81.773983] ? __msan_poison_alloca+0x15c/0x1d0 [ 81.778664] __alloc_pages_nodemask+0x792/0x5cc0 [ 81.783418] ? __is_insn_slot_addr+0x198/0x1c0 [ 81.787997] ? kernel_text_address+0x34d/0x3a0 [ 81.792582] ? __kernel_text_address+0x34/0xe0 [ 81.797165] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 81.802616] ? __save_stack_trace+0x90d/0xb00 [ 81.807120] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 81.812501] alloc_pages_current+0x6b1/0x970 [ 81.816912] get_zeroed_page+0x3f/0xd0 [ 81.820799] __pud_alloc+0xab/0x440 [ 81.824420] ? copy_process+0x6d9b/0x9be0 [ 81.828566] copy_page_range+0x3c1a/0x3f50 [ 81.832804] ? __rb_insert_augmented+0xd5a/0x13f0 [ 81.837647] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 81.843008] ? init_admin_reserve+0x160/0x160 [ 81.847522] ? __vma_link_rb+0xbd3/0xc90 [ 81.851585] copy_process+0x6d9b/0x9be0 [ 81.855576] _do_fork+0x353/0xf60 [ 81.859033] __x64_sys_clone+0x15e/0x1b0 [ 81.863094] ? __ia32_sys_vfork+0x70/0x70 [ 81.867241] do_syscall_64+0x15b/0x230 [ 81.871130] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 81.876312] RIP: 0033:0x41f8b9 [ 81.879494] RSP: 002b:0000000000a3fad0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 81.887197] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000041f8b9 [ 81.894462] RDX: 0000000000a3fadc RSI: 0000000000000000 RDI: 0000000000100011 [ 81.901734] RBP: 0000000000a3fc80 R08: 0000000000a44a60 R09: 000000000000001a [ 81.908995] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000a3feb0 [ 81.916258] R13: 0000000000a3fe28 R14: 0000000000000000 R15: 0000000000000000 [ 81.923911] Dumping ftrace buffer: [ 81.927438] (ftrace buffer empty) [ 81.931122] Kernel Offset: disabled [ 81.934722] Rebooting in 86400 seconds..