[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 33.985594] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. [ 34.797815] random: sshd: uninitialized urandom read (32 bytes read) [ 35.250522] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 36.695252] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.33' (ECDSA) to the list of known hosts. [ 42.349700] random: sshd: uninitialized urandom read (32 bytes read) 2018/09/08 18:31:20 fuzzer started [ 43.763497] random: cc1: uninitialized urandom read (8 bytes read) 2018/09/08 18:31:23 dialing manager at 10.128.0.26:44893 2018/09/08 18:31:23 syscalls: 1 2018/09/08 18:31:23 code coverage: enabled 2018/09/08 18:31:23 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/09/08 18:31:23 setuid sandbox: enabled 2018/09/08 18:31:23 namespace sandbox: enabled 2018/09/08 18:31:23 fault injection: enabled 2018/09/08 18:31:23 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/09/08 18:31:23 net packed injection: enabled 2018/09/08 18:31:23 net device setup: enabled [ 48.057867] random: crng init done 18:33:25 executing program 7: r0 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x0, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000080)) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000001c0)=0x1e) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000440)) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000005c0)=@filter={'filter\x00', 0xe, 0x3, 0x0, [0x0, 0x20000240, 0x20000270, 0x20000470], 0x0, &(0x7f0000000000), &(0x7f0000000240)=ANY=[]}, 0x78) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000140)={0x0, &(0x7f00000000c0)}) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) 18:33:25 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) add_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x0, 0xfffffffffffffffb) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioprio_set$uid(0x0, 0x0, 0x8) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000180)) 18:33:25 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x0, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = getpid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in=@broadcast, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in=@multicast2}}, &(0x7f00000001c0)=0xe8) sched_setscheduler(r1, 0x5, &(0x7f0000000080)) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000000)) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@generic={0x3, 0x80000000, 0xff}) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f00000002c0)="76347d076b9e9b5c64ac36d6226631eed6e72764a7ab83bb503935421324cc63cc7003d081188046f8434b6f6135a92bcf20d9a97f1c28bf2878f29c6f36117ab473281165bd452ae92ece1bb33e1e6367ef9032abeaf53903365c3643f7afa2eaa25da4f12a9d2bf64d4cbc86bf74b664384ffb22cb7722c1d21bd794efbbc9d227c917c9335c825642b681c254724345bb1fc72a97eda79f6471715faf3bb72ae1a08d2412345d139a274f9d863ead5ced9ab7453e59d14e961c2542ccf7eecb23fe174a77e82a8663a51bc7c78086b6651e2ac80551535d67855d4bad8421e18c95497f60f5c4ee13c5aa4c2ae1b60346e42a101d32fab0ce582dd36b1759") sendto$unix(r0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e) 18:33:25 executing program 5: syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) 18:33:25 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast1}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000000)=""/246) 18:33:25 executing program 6: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKBSZSET(r0, 0x125d, &(0x7f00000000c0)) 18:33:25 executing program 2: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000017fdc)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2400000002031f001cfffd946fa2830020200a000900030002e7fffffff5a3a20404ff7e", 0x24}], 0x1}, 0x0) 18:33:25 executing program 3: socket$inet_dccp(0x2, 0x6, 0x0) socketpair$inet(0x2, 0x0, 0x0, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200)) pipe(&(0x7f0000000540)) r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d}, 0x2c) [ 168.714050] IPVS: ftp: loaded support on port[0] = 21 [ 168.722266] IPVS: ftp: loaded support on port[0] = 21 [ 168.734416] IPVS: ftp: loaded support on port[0] = 21 [ 168.762894] IPVS: ftp: loaded support on port[0] = 21 [ 168.797325] IPVS: ftp: loaded support on port[0] = 21 [ 168.805201] IPVS: ftp: loaded support on port[0] = 21 [ 168.845073] IPVS: ftp: loaded support on port[0] = 21 [ 168.876817] IPVS: ftp: loaded support on port[0] = 21 [ 172.706913] ip (4570) used greatest stack depth: 53496 bytes left [ 173.557497] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.563975] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.629395] device bridge_slave_0 entered promiscuous mode [ 173.662268] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.668827] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.690785] device bridge_slave_0 entered promiscuous mode [ 173.706346] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.712800] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.741784] device bridge_slave_0 entered promiscuous mode [ 173.781052] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.787528] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.825085] device bridge_slave_0 entered promiscuous mode [ 173.840662] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.847142] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.875574] device bridge_slave_0 entered promiscuous mode [ 173.899403] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.905921] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.921098] device bridge_slave_0 entered promiscuous mode [ 173.938817] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.945391] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.963900] device bridge_slave_1 entered promiscuous mode [ 173.975076] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.981551] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.008685] device bridge_slave_0 entered promiscuous mode [ 174.036174] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.042630] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.078652] device bridge_slave_1 entered promiscuous mode [ 174.102111] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.108562] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.143418] device bridge_slave_1 entered promiscuous mode [ 174.160066] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.166525] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.179266] device bridge_slave_1 entered promiscuous mode [ 174.197420] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.203969] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.222805] device bridge_slave_0 entered promiscuous mode [ 174.238450] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 174.246741] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.253212] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.267682] device bridge_slave_1 entered promiscuous mode [ 174.287584] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.294044] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.311781] device bridge_slave_1 entered promiscuous mode [ 174.334667] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.341122] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.368738] device bridge_slave_1 entered promiscuous mode [ 174.389115] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 174.415429] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 174.423141] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 174.475788] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 174.491859] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.498373] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.557754] device bridge_slave_1 entered promiscuous mode [ 174.587267] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 174.621128] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 174.683054] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 174.699853] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 174.725736] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 174.745800] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 174.871835] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 174.890328] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 174.969099] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 175.015549] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 175.188963] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 175.427703] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 175.566129] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 175.655913] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 175.696214] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 175.743938] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 175.851099] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 175.877833] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 175.906367] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 175.918121] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 175.972773] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 176.031824] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 176.042757] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 176.057193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 176.113046] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 176.155227] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 176.184774] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 176.191686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 176.223885] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 176.272816] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 176.291709] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 176.298790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 176.358824] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 176.365787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 176.379410] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 176.386582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 176.460774] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 176.467740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 176.483067] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 176.500034] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 176.509051] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 176.516227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 176.528075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 176.621741] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 176.628788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 176.644528] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 176.651785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 176.729175] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 176.736123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 176.808733] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 176.815706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 176.834206] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 176.883724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 176.904942] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 176.911879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 177.003335] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 177.010405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 177.103059] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 177.110696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 177.391690] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 177.428675] team0: Port device team_slave_0 added [ 177.505336] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 177.537700] team0: Port device team_slave_0 added [ 177.572716] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 177.591057] team0: Port device team_slave_0 added [ 177.679817] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 177.721918] team0: Port device team_slave_1 added [ 177.735821] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 177.749132] team0: Port device team_slave_0 added [ 177.809135] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 177.842891] team0: Port device team_slave_0 added [ 177.859152] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 177.873224] team0: Port device team_slave_1 added [ 177.904646] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 177.935202] team0: Port device team_slave_0 added [ 177.956489] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 177.984675] team0: Port device team_slave_1 added [ 178.004122] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 178.017264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 178.035505] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 178.070494] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 178.093146] team0: Port device team_slave_0 added [ 178.140201] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 178.159597] team0: Port device team_slave_1 added [ 178.170892] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 178.184807] team0: Port device team_slave_1 added [ 178.193245] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 178.205904] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 178.226897] team0: Port device team_slave_1 added [ 178.235420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 178.249619] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 178.288175] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 178.305820] team0: Port device team_slave_0 added [ 178.324138] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 178.338955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 178.359491] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 178.394259] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 178.401826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 178.419587] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 178.448768] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 178.463014] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 178.476799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 178.498964] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 178.517709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 178.543699] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 178.575743] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 178.587866] team0: Port device team_slave_1 added [ 178.621069] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 178.637831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 178.649621] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 178.664389] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 178.672098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 178.695372] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 178.718532] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 178.726471] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 178.750962] team0: Port device team_slave_1 added [ 178.777709] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 178.789808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 178.810880] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 178.844768] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.867769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 178.894895] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 178.905959] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.920264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 178.945364] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 178.963380] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 178.973455] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 178.985968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 179.020498] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 179.044081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 179.069540] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 179.094075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 179.119643] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 179.149019] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 179.162033] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 179.174054] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 179.184615] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 179.194025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 179.213027] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 179.238140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 179.253096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 179.272327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 179.293389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 179.310783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 179.327540] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 179.342159] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 179.351475] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 179.373714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 179.385957] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 179.400886] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 179.410433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 179.433803] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 179.446734] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 179.457881] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 179.467014] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 179.475115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 179.488023] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 179.533134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 179.560342] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 179.580263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 179.607768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 179.618611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 179.640680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 179.653844] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 179.664410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 179.675190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 179.722203] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 179.735804] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 179.762357] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 179.770431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 179.829645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 179.866387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 179.899844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 179.939403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 179.966546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 179.995111] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 180.017377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 180.027165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 180.099185] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 180.107574] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 180.117371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 180.150524] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 180.162638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 180.212927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 180.262466] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 180.269899] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 180.296211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 182.919449] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.925946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.932836] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.939337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.006225] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 183.012786] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 183.049827] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.056340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.063205] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.069690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.133165] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 183.154883] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.161349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.168216] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.174661] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.199662] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 183.222402] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.228883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.235738] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.242206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.315809] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 183.340623] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.347081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.353976] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.360444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.454763] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 183.480193] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.486700] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.493557] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.500037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.564762] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 183.856670] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.863187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.870035] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.876477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.889690] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 183.901940] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.908443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.915379] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.921852] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.938930] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 184.019430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 184.040683] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 184.075822] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 184.107969] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 184.136645] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 184.174072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 184.195120] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 191.829162] ip (5576) used greatest stack depth: 53464 bytes left [ 195.154442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.189342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.340134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.416397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.564530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.984159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.062330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.196779] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 196.336223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.399371] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 196.420341] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 196.677178] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 196.694631] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 197.029774] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 197.258340] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 197.390548] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 197.396889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.408139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.465471] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 197.483115] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 197.489451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.499585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.554665] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 197.560914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.571329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.885257] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 197.891595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.903139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.975592] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 197.984406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.997314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 198.239409] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 198.245779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 198.258712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 198.473714] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 198.479965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 198.492977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 198.617260] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.643963] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 198.650215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 198.661193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 198.724044] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.829725] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.139201] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.244887] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.510935] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.757000] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.801090] 8021q: adding VLAN 0 to HW filter on device team0 18:34:04 executing program 5: 18:34:04 executing program 6: 18:34:04 executing program 7: 18:34:04 executing program 1: 18:34:04 executing program 6: 18:34:04 executing program 5: 18:34:04 executing program 1: 18:34:04 executing program 7: 18:34:04 executing program 4: r0 = userfaultfd(0x1000080800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)) r1 = memfd_create(&(0x7f0000000140)='\x00', 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000040), 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mremap(&(0x7f0000a29000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) dup3(r1, r0, 0x0) [ 206.877646] Unknown ioctl 4727 18:34:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000180)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000002e0019010000000000000000010000000800000004000100eb2310fd4ff0d6a8c684c76ce28a64625d925db3ce512b6e42fbd652afc22945e253e785d0ba94e1f017afe867ebc35216db62b84dfe40028c6a33f1ae75a6051506619b0c39114be547401d5d1be2b5514c14397ea0afecfbb9cfa68583a20c787481fc4a99ec3cc32b72df45d28263c3df5959ac4adadc9a799559c63d9f5418089794b96fe7703a3c0551d823f69ceca24810386ce13d7c1dd2d212780052fb925a470ade85acb6b3491f9121d9f548cdfeea6877bd3f2a05"], 0x1}}, 0x0) 18:34:04 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/4\x00') getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="0700aca9", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000200)=0x20) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000002c0)={0x0, 0xb35}, &(0x7f0000000300)=0xc) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000340)=r1, 0x4) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x100, 0x4) openat(r2, &(0x7f0000000100)='./file0\x00', 0x400000, 0x21) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/xfrm_stat\x00') preadv(r3, &(0x7f0000000480), 0xbad7d230d7490bc, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f0000000380), &(0x7f00000003c0)=0xc) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000280)=0x14) 18:34:04 executing program 6: r0 = add_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x59, 0xfffffffffffffffd) request_key(&(0x7f0000001280)='asymmetric\x00', &(0x7f0000001ffb)={0x73, 0x79, 0x7a, 0xffffffffffffffff, 0x2}, &(0x7f0000001fee)="520400000065000000000000000000000000", r0) r1 = accept(0xffffffffffffff9c, 0x0, &(0x7f0000000080)) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) [ 206.932527] Unknown ioctl 4727 18:34:05 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.mem_exclusive\x00', 0x2, 0x0) pwritev(r0, &(0x7f00000012c0), 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getpeername$inet(r1, &(0x7f0000000340)={0x2, 0x0, @multicast2}, &(0x7f0000000380)=0x10) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffff8) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pread64(r0, &(0x7f0000000280)=""/161, 0xa1, 0x0) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='wchan\x00') ioctl$TCSETS(r5, 0x5402, &(0x7f0000000400)={0x7, 0x8001, 0x1, 0xfffffffffffffffa, 0x78, 0x1, 0x3, 0x10001, 0x5, 0x4, 0x3, 0x3}) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000440)='trusted.overlay.redirect\x00', &(0x7f0000000480)='./file0\x00', 0x8, 0x3) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000003580)='/dev/autofs\x00', 0x400, 0x0) accept4$inet6(r6, &(0x7f00000035c0)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, &(0x7f0000003600)=0x1c, 0x80800) keyctl$chown(0x4, r2, r4, r3) 18:34:05 executing program 7: r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, &(0x7f00000000c0)}, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc={0x27, 0x3, 0x0, 0xffffff7f}, 0x80, &(0x7f00000001c0)}, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x2300, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000100)=0xfffffffffffff801, 0x4) [ 207.176872] ================================================================== [ 207.184323] BUG: KMSAN: uninit-value in ip_rcv_core+0xabd/0x1160 [ 207.190504] CPU: 0 PID: 6477 Comm: syz-executor7 Not tainted 4.19.0-rc1+ #42 [ 207.197701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 207.207059] Call Trace: [ 207.209664] [ 207.211833] dump_stack+0x14b/0x190 [ 207.215495] kmsan_report+0x183/0x2b0 [ 207.219320] __msan_warning+0x70/0xc0 [ 207.223149] ip_rcv_core+0xabd/0x1160 [ 207.226998] ip_rcv+0xbb/0x6d0 [ 207.230234] process_backlog+0x752/0x10b0 [ 207.234431] ? ip_local_deliver_finish+0xea0/0xea0 [ 207.239385] ? rps_trigger_softirq+0x2e0/0x2e0 [ 207.244000] net_rx_action+0x723/0x19d0 [ 207.248047] ? net_tx_action+0xc40/0xc40 [ 207.252140] __do_softirq+0x562/0x948 [ 207.255993] do_softirq_own_stack+0x49/0x80 [ 207.260334] [ 207.262594] __local_bh_enable_ip+0x119/0x150 [ 207.267136] local_bh_enable+0x36/0x40 [ 207.271045] __dev_queue_xmit+0x35a8/0x3ab0 [ 207.275400] ? kmsan_memcpy_origins+0x111/0x1b0 [ 207.280123] dev_queue_xmit+0x4b/0x60 [ 207.283969] ? __netdev_pick_tx+0x12e0/0x12e0 [ 207.288500] packet_sendmsg+0x80ff/0x8c60 [ 207.292735] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 207.298175] ___sys_sendmsg+0xe70/0x1290 [ 207.302273] ? compat_packet_setsockopt+0x360/0x360 [ 207.307371] __se_sys_sendmsg+0x2a3/0x3d0 [ 207.311573] __x64_sys_sendmsg+0x4a/0x70 [ 207.315656] do_syscall_64+0xb8/0x100 [ 207.319488] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 207.324697] RIP: 0033:0x457099 [ 207.327918] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 207.346849] RSP: 002b:00007f8361a48c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 207.354599] RAX: ffffffffffffffda RBX: 00007f8361a496d4 RCX: 0000000000457099 [ 207.361882] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 207.369176] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 207.376497] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 207.383802] R13: 00000000004d4b30 R14: 00000000004c90b1 R15: 0000000000000000 [ 207.391093] [ 207.392730] Uninit was stored to memory at: [ 207.397070] kmsan_internal_chain_origin+0x128/0x210 [ 207.402190] __msan_chain_origin+0x69/0xc0 [ 207.406461] iptunnel_xmit+0xa3c/0xd50 [ 207.410379] ip_tunnel_xmit+0x33e1/0x3750 [ 207.414547] ipgre_xmit+0xdcf/0xeb0 [ 207.418196] dev_hard_start_xmit+0x5df/0xc20 [ 207.422646] __dev_queue_xmit+0x2f35/0x3ab0 [ 207.427008] dev_queue_xmit+0x4b/0x60 [ 207.430823] packet_sendmsg+0x80ff/0x8c60 [ 207.434997] ___sys_sendmsg+0xe70/0x1290 [ 207.439109] __se_sys_sendmsg+0x2a3/0x3d0 [ 207.443282] __x64_sys_sendmsg+0x4a/0x70 [ 207.447360] do_syscall_64+0xb8/0x100 [ 207.451190] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 207.456384] [ 207.458028] Uninit was created at: [ 207.461613] kmsan_internal_poison_shadow+0xb8/0x1b0 [ 207.466744] kmsan_kmalloc+0x98/0x100 [ 207.470562] kmsan_slab_alloc+0x10/0x20 [ 207.474551] __kmalloc_node_track_caller+0x9e7/0x1160 [ 207.479752] __alloc_skb+0x2f5/0x9e0 [ 207.483502] alloc_skb_with_frags+0x1d0/0xac0 [ 207.488025] sock_alloc_send_pskb+0xb47/0x1170 [ 207.492665] packet_sendmsg+0x6599/0x8c60 [ 207.496827] ___sys_sendmsg+0xe70/0x1290 [ 207.500899] __se_sys_sendmsg+0x2a3/0x3d0 [ 207.505076] __x64_sys_sendmsg+0x4a/0x70 [ 207.509154] do_syscall_64+0xb8/0x100 [ 207.512998] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 207.518205] ================================================================== [ 207.525573] Disabling lock debugging due to kernel taint [ 207.531036] Kernel panic - not syncing: panic_on_warn set ... [ 207.531036] [ 207.538453] CPU: 0 PID: 6477 Comm: syz-executor7 Tainted: G B 4.19.0-rc1+ #42 [ 207.547041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 207.556430] Call Trace: [ 207.559036] [ 207.561212] dump_stack+0x14b/0x190 [ 207.564877] panic+0x35d/0x8cb [ 207.568140] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 207.573657] kmsan_report+0x2a8/0x2b0 [ 207.577506] __msan_warning+0x70/0xc0 [ 207.581335] ip_rcv_core+0xabd/0x1160 [ 207.585176] ip_rcv+0xbb/0x6d0 [ 207.588432] process_backlog+0x752/0x10b0 [ 207.592636] ? ip_local_deliver_finish+0xea0/0xea0 [ 207.597594] ? rps_trigger_softirq+0x2e0/0x2e0 [ 207.602210] net_rx_action+0x723/0x19d0 [ 207.606260] ? net_tx_action+0xc40/0xc40 [ 207.610346] __do_softirq+0x562/0x948 [ 207.614203] do_softirq_own_stack+0x49/0x80 [ 207.618541] [ 207.620807] __local_bh_enable_ip+0x119/0x150 [ 207.625338] local_bh_enable+0x36/0x40 [ 207.629263] __dev_queue_xmit+0x35a8/0x3ab0 [ 207.633607] ? kmsan_memcpy_origins+0x111/0x1b0 [ 207.638327] dev_queue_xmit+0x4b/0x60 [ 207.642155] ? __netdev_pick_tx+0x12e0/0x12e0 [ 207.646691] packet_sendmsg+0x80ff/0x8c60 [ 207.650904] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 207.656372] ___sys_sendmsg+0xe70/0x1290 [ 207.660468] ? compat_packet_setsockopt+0x360/0x360 [ 207.665566] __se_sys_sendmsg+0x2a3/0x3d0 [ 207.669764] __x64_sys_sendmsg+0x4a/0x70 [ 207.673847] do_syscall_64+0xb8/0x100 [ 207.677670] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 207.682872] RIP: 0033:0x457099 [ 207.686085] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 207.705020] RSP: 002b:00007f8361a48c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 207.712750] RAX: ffffffffffffffda RBX: 00007f8361a496d4 RCX: 0000000000457099 [ 207.720037] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 207.727329] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 207.734627] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 207.741929] R13: 00000000004d4b30 R14: 00000000004c90b1 R15: 0000000000000000 [ 207.744344] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'. [ 207.749601] Dumping ftrace buffer: [ 207.749608] (ftrace buffer empty) [ 207.749615] Kernel Offset: disabled [ 207.768851] Rebooting in 86400 seconds..