[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 39.197156] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. [ 39.690494] random: sshd: uninitialized urandom read (32 bytes read) [ 40.162664] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 41.324802] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.32' (ECDSA) to the list of known hosts. [ 47.116343] random: sshd: uninitialized urandom read (32 bytes read) 2018/09/05 15:32:23 fuzzer started [ 48.496340] random: cc1: uninitialized urandom read (8 bytes read) 2018/09/05 15:32:26 dialing manager at 10.128.0.26:42141 2018/09/05 15:32:26 syscalls: 1 2018/09/05 15:32:26 code coverage: enabled 2018/09/05 15:32:26 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/09/05 15:32:26 setuid sandbox: enabled 2018/09/05 15:32:26 namespace sandbox: enabled 2018/09/05 15:32:26 fault injection: enabled 2018/09/05 15:32:26 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/09/05 15:32:26 net packed injection: enabled 2018/09/05 15:32:26 net device setup: enabled [ 52.358852] random: crng init done 15:34:17 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) close(r1) 15:34:17 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000280)=""/177, &(0x7f0000000000)=0xfffffffffffffef6) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) sched_setscheduler(0x0, 0x0, &(0x7f0000000000)) 15:34:18 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d5c6070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000000)={r1, r2}) 15:34:18 executing program 4: socket$inet6(0xa, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00\x00d\x00', 0x20, 0x1, 0x1c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000100], 0x0, &(0x7f0000000040), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x9, 0x0, 0x0, 'bond0\x00', 'bond_slave_0\x00', 'veth0_to_team\x00', 'veth0\x00', @link_local, [], @empty, [], 0x108, 0x108, 0x138, [@limit={'limit\x00', 0x20, {{0xfffffffffffffc00, 0x81}}}, @ipvs={'ipvs\x00', 0x28, {{@ipv6}}}]}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x240) 15:34:18 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffbfffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f000000a000)) 15:34:18 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={"6c6f00000000008b000000001a00", {0x2, 0x0, @broadcast}}) r1 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000080)={'lo\x00'}) 15:34:18 executing program 3: mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x7f, 0x0, &(0x7f0000664fc0)) 15:34:18 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)={0x1, 0x0, 0x0, 'O'}) [ 163.160377] IPVS: ftp: loaded support on port[0] = 21 [ 163.183881] IPVS: ftp: loaded support on port[0] = 21 [ 163.269698] IPVS: ftp: loaded support on port[0] = 21 [ 163.288409] IPVS: ftp: loaded support on port[0] = 21 [ 163.301695] IPVS: ftp: loaded support on port[0] = 21 [ 163.324334] IPVS: ftp: loaded support on port[0] = 21 [ 163.347797] IPVS: ftp: loaded support on port[0] = 21 [ 163.366290] IPVS: ftp: loaded support on port[0] = 21 [ 165.915518] ip (4861) used greatest stack depth: 53752 bytes left [ 167.482615] ip (4947) used greatest stack depth: 53496 bytes left [ 168.401162] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.407730] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.442341] device bridge_slave_0 entered promiscuous mode [ 168.520929] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.527485] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.567705] device bridge_slave_0 entered promiscuous mode [ 168.590736] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.597243] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.633084] device bridge_slave_0 entered promiscuous mode [ 168.655341] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.661889] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.693410] device bridge_slave_0 entered promiscuous mode [ 168.718097] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.724597] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.751802] device bridge_slave_0 entered promiscuous mode [ 168.770386] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.776880] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.803351] device bridge_slave_0 entered promiscuous mode [ 168.826888] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.833392] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.863117] device bridge_slave_1 entered promiscuous mode [ 168.881722] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.888222] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.903495] device bridge_slave_0 entered promiscuous mode [ 168.927094] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.933690] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.950174] device bridge_slave_0 entered promiscuous mode [ 168.967084] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.973584] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.999516] device bridge_slave_1 entered promiscuous mode [ 169.008863] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.015325] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.027140] device bridge_slave_1 entered promiscuous mode [ 169.035950] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.042446] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.080127] device bridge_slave_1 entered promiscuous mode [ 169.114307] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.120781] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.168062] device bridge_slave_1 entered promiscuous mode [ 169.180005] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 169.196035] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.202533] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.234856] device bridge_slave_1 entered promiscuous mode [ 169.252756] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.259221] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.281059] device bridge_slave_1 entered promiscuous mode [ 169.288033] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.294489] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.318063] device bridge_slave_1 entered promiscuous mode [ 169.336120] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 169.343689] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 169.351349] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 169.413098] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 169.433857] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 169.541953] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 169.587850] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 169.638873] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 169.650341] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 169.660024] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 169.700191] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 169.760734] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 169.858519] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 169.879367] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 170.001086] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 170.396033] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 170.581764] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 170.602594] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 170.645479] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 170.710798] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 170.746307] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 170.849779] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 170.894297] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 170.933532] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 170.944204] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 170.963080] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 170.985216] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 171.051234] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 171.059859] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 171.080376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 171.168093] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 171.235063] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 171.242010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 171.266502] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 171.308699] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 171.318211] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 171.325173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 171.360838] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 171.370720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 171.390341] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 171.398752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 171.414063] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 171.424510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 171.524108] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 171.531115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 171.580797] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 171.587804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 171.618229] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 171.625220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 171.669817] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 171.676841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 171.708289] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 171.722723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 171.744315] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 171.770309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 171.794147] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 171.801328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 171.868161] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 171.876390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 171.896678] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 171.903785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 172.072385] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 172.081118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 172.403270] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 172.427155] team0: Port device team_slave_0 added [ 172.563704] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 172.583108] team0: Port device team_slave_0 added [ 172.691099] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 172.726930] team0: Port device team_slave_0 added [ 172.774790] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 172.796999] team0: Port device team_slave_1 added [ 172.819856] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 172.836027] team0: Port device team_slave_0 added [ 172.846033] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 172.867249] team0: Port device team_slave_0 added [ 172.925246] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 172.950510] team0: Port device team_slave_1 added [ 172.981386] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 173.006322] team0: Port device team_slave_0 added [ 173.024426] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 173.046811] team0: Port device team_slave_0 added [ 173.092947] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 173.104311] team0: Port device team_slave_1 added [ 173.110800] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 173.122168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 173.137196] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 173.188441] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 173.205057] team0: Port device team_slave_1 added [ 173.226422] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 173.241750] team0: Port device team_slave_1 added [ 173.278183] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 173.296912] team0: Port device team_slave_0 added [ 173.312466] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 173.319451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 173.343283] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 173.361818] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 173.376894] team0: Port device team_slave_1 added [ 173.421234] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 173.428278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 173.449526] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 173.478960] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 173.490885] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 173.497984] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 173.522470] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 173.548533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 173.574878] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 173.589199] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 173.606470] team0: Port device team_slave_1 added [ 173.652305] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 173.660224] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 173.669400] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 173.686343] team0: Port device team_slave_1 added [ 173.691749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 173.705580] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 173.734492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 173.763011] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 173.783005] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 173.790998] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 173.804193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 173.817085] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 173.849771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 173.878868] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 173.913488] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 173.922840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 173.947459] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 173.977993] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 173.993728] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 174.003888] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 174.027068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 174.043796] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 174.067189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 174.087494] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 174.094833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 174.115029] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 174.142574] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 174.150597] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 174.165903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 174.176964] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 174.207940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 174.230850] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 174.262307] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 174.274802] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 174.288389] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 174.303786] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 174.324753] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 174.332313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 174.344871] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 174.385891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 174.419841] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 174.453570] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 174.492247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 174.508980] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 174.529535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 174.538865] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 174.547578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 174.584798] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 174.593010] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 174.602223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 174.611605] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 174.625810] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 174.637981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 174.662030] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 174.674118] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 174.684590] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 174.710748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 174.733189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 174.763783] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 174.808974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 174.849871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 174.872898] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 174.896539] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 174.904278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 174.916853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 174.940476] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 174.962849] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 174.973714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 175.010401] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 175.020871] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 175.028412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 175.078290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 175.115876] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 175.149052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 175.179739] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 175.189999] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 175.207220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 175.259936] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 175.267383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 175.289874] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 175.347985] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 175.356210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 175.373373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 178.040117] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.046700] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.053595] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.060130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.108672] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 178.115801] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 178.147918] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.154402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.161254] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.167836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.183950] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 178.193166] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.199703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.206565] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.213021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.241946] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 178.571273] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.577758] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.584669] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.591117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.634561] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 178.830081] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.836594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.843474] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.849936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.898140] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 178.936746] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.943263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.950135] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.956666] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.965831] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 178.980180] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.986737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.993607] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.000142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.062177] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 179.158404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 179.177506] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 179.213713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 179.240047] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 179.261454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 179.273220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 179.352944] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.359442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.366307] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.372806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.439527] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 180.181436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 191.066877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.452483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.506059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.902309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.077958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.145058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.241696] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 192.339534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.676536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.699162] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 192.744936] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 193.148566] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 193.178552] ip (6241) used greatest stack depth: 53464 bytes left [ 193.293001] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 193.341907] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 193.462367] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 193.469037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 193.481230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 193.691986] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 193.902905] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 193.942579] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 193.950577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 193.962585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 194.006241] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 194.013417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 194.030813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 194.421122] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 194.427829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 194.439546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 194.575326] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 194.581794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 194.597589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 194.680262] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 194.689219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 194.704568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 194.738358] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.967584] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 194.973963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 194.985789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 195.095248] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.143141] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 195.149429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 195.163133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 195.251924] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.697532] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.928287] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.989841] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.230807] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.397149] 8021q: adding VLAN 0 to HW filter on device team0 15:34:58 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={"6c6f00000000008b000000001a00", {0x2, 0x0, @broadcast}}) r1 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000080)={'lo\x00'}) 15:34:59 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) ioctl$KDSETLED(r2, 0x8916, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0x7, 0x4, 0x478, 0x138, 0x0, 0x138, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@local, @rand_addr, 0x0, 0x0, @empty, {[0xff]}, @empty, {[0x0, 0xff]}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 'veth1\x00', 'ip6gre0\x00'}, 0xf0, 0x138}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@arp={@multicast2, @broadcast, 0x0, 0x0, @mac, {[0xff, 0xff]}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz_tun\x00', 'ip6gre0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@local, @multicast2, @broadcast}}}, {{@uncond, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 15:34:59 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={"6c6f00000000008b000000001a00", {0x2, 0x0, @broadcast}}) r1 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000080)={'lo\x00'}) 15:34:59 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x208200) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0) creat(&(0x7f0000000140)='./bus\x00', 0x0) 15:34:59 executing program 3: perf_event_open(&(0x7f0000c86f88)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) clock_settime(0xfffffffffffffff7, &(0x7f0000000000)) 15:34:59 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={"6c6f00000000008b000000001a00", {0x2, 0x0, @broadcast}}) r1 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000080)={'lo\x00'}) 15:34:59 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) timer_create(0x922aa2722864d357, &(0x7f0000000240)={0x0, 0x31, 0x0, @thr={&(0x7f0000000100), &(0x7f0000000040)}}, &(0x7f0000000280)) fanotify_mark(0xffffffffffffffff, 0x0, 0x8000000000000000, 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00') 15:34:59 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="b702000002000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7030000010000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00'}, 0x48) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r0, 0x0, 0xe, 0x28, &(0x7f0000000780)="3b9ab5ce1517fdc54a437ebd9b9d", &(0x7f00000007c0)=""/40, 0x3}, 0x28) 15:34:59 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvfrom(r1, &(0x7f0000000040)=""/58, 0x3a, 0x0, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score\x00') sendfile(r0, r2, &(0x7f0000000100), 0x7ff) 15:34:59 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0xf, @remote}, 0x1c) [ 203.885114] ebt_limit: overflow, try lower: 4294966272/129 [ 204.006309] ================================================================== [ 204.013748] BUG: KMSAN: uninit-value in bond_start_xmit+0x1ab8/0x2b90 [ 204.020357] CPU: 0 PID: 6863 Comm: syz-executor1 Not tainted 4.19.0-rc1+ #41 [ 204.027586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 204.036954] Call Trace: [ 204.039574] dump_stack+0x14b/0x190 [ 204.043244] kmsan_report+0x183/0x2b0 [ 204.047086] __msan_warning+0x70/0xc0 [ 204.050933] bond_start_xmit+0x1ab8/0x2b90 [ 204.055225] ? bond_close+0x1d0/0x1d0 [ 204.059062] dev_hard_start_xmit+0x5df/0xc20 [ 204.063544] __dev_queue_xmit+0x2f35/0x3ab0 [ 204.067969] dev_queue_xmit+0x4b/0x60 [ 204.071796] ? __netdev_pick_tx+0x12e0/0x12e0 [ 204.076327] packet_sendmsg+0x80ff/0x8c60 [ 204.080542] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 204.085951] ? kmsan_set_origin_inline+0x6b/0x120 [ 204.090820] ? __msan_poison_alloca+0x173/0x1f0 [ 204.095597] ? compat_packet_setsockopt+0x360/0x360 [ 204.100664] __sys_sendto+0x868/0xa30 [ 204.104519] ? prepare_exit_to_usermode+0x46/0x410 [ 204.109529] ? syscall_return_slowpath+0xdb/0x700 [ 204.114433] __se_sys_sendto+0x107/0x130 [ 204.118554] __x64_sys_sendto+0x6e/0x90 [ 204.122566] do_syscall_64+0xb8/0x100 [ 204.126394] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 204.131600] RIP: 0033:0x457099 [ 204.134827] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 204.153746] RSP: 002b:00007f6257787c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 204.161503] RAX: ffffffffffffffda RBX: 00007f62577886d4 RCX: 0000000000457099 [ 204.168792] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 204.176082] RBP: 00000000009300a0 R08: 0000000020000080 R09: 000000000000001c [ 204.183376] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 204.190665] R13: 00000000004d4cc8 R14: 00000000004c91af R15: 0000000000000000 [ 204.197966] [ 204.199603] Uninit was created at: [ 204.203177] kmsan_internal_poison_shadow+0xb8/0x1b0 [ 204.208310] kmsan_kmalloc+0x98/0x100 [ 204.212161] kmsan_slab_alloc+0x10/0x20 [ 204.216168] __kmalloc_node_track_caller+0x9e7/0x1160 [ 204.221373] __alloc_skb+0x2f5/0x9e0 [ 204.225179] alloc_skb_with_frags+0x1d0/0xac0 [ 204.229701] sock_alloc_send_pskb+0xb47/0x1170 [ 204.234315] packet_sendmsg+0x6599/0x8c60 [ 204.238517] __sys_sendto+0x868/0xa30 [ 204.242340] __se_sys_sendto+0x107/0x130 [ 204.246460] __x64_sys_sendto+0x6e/0x90 [ 204.250475] do_syscall_64+0xb8/0x100 [ 204.254323] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 204.259537] ================================================================== [ 204.266906] Disabling lock debugging due to kernel taint [ 204.272376] Kernel panic - not syncing: panic_on_warn set ... [ 204.272376] [ 204.279775] CPU: 0 PID: 6863 Comm: syz-executor1 Tainted: G B 4.19.0-rc1+ #41 [ 204.288365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 204.297735] Call Trace: [ 204.300352] dump_stack+0x14b/0x190 [ 204.304022] panic+0x35d/0x8cb [ 204.307291] kmsan_report+0x2a8/0x2b0 [ 204.311129] __msan_warning+0x70/0xc0 [ 204.314976] bond_start_xmit+0x1ab8/0x2b90 [ 204.319266] ? bond_close+0x1d0/0x1d0 [ 204.323123] dev_hard_start_xmit+0x5df/0xc20 [ 204.327591] __dev_queue_xmit+0x2f35/0x3ab0 [ 204.331986] dev_queue_xmit+0x4b/0x60 [ 204.335849] ? __netdev_pick_tx+0x12e0/0x12e0 [ 204.340377] packet_sendmsg+0x80ff/0x8c60 [ 204.344583] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 204.349970] ? kmsan_set_origin_inline+0x6b/0x120 [ 204.354840] ? __msan_poison_alloca+0x173/0x1f0 [ 204.359585] ? compat_packet_setsockopt+0x360/0x360 [ 204.364637] __sys_sendto+0x868/0xa30 [ 204.368469] ? prepare_exit_to_usermode+0x46/0x410 [ 204.373438] ? syscall_return_slowpath+0xdb/0x700 [ 204.378364] __se_sys_sendto+0x107/0x130 [ 204.382498] __x64_sys_sendto+0x6e/0x90 [ 204.386531] do_syscall_64+0xb8/0x100 [ 204.390364] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 204.395569] RIP: 0033:0x457099 [ 204.398786] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 204.417713] RSP: 002b:00007f6257787c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 204.419211] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 204.425459] RAX: ffffffffffffffda RBX: 00007f62577886d4 RCX: 0000000000457099 [ 204.425472] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 204.425502] RBP: 00000000009300a0 R08: 0000000020000080 R09: 000000000000001c [ 204.425515] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 204.425526] R13: 00000000004d4cc8 R14: 00000000004c91af R15: 0000000000000000 [ 204.443356] Dumping ftrace buffer: [ 204.443363] (ftrace buffer empty) [ 204.443369] Kernel Offset: disabled [ 204.490470] Rebooting in 86400 seconds..