[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 35.681083] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. [ 36.746454] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux[ 37.021462] random: sshd: uninitialized urandom read (32 bytes read) 7 syzkaller ttyS0 syzkaller login: [ 37.995344] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.15' (ECDSA) to the list of known hosts. [ 43.603506] random: sshd: uninitialized urandom read (32 bytes read) 2018/08/18 22:16:58 fuzzer started [ 44.989921] random: cc1: uninitialized urandom read (8 bytes read) 2018/08/18 22:17:01 dialing manager at 10.128.0.26:46635 2018/08/18 22:17:03 syscalls: 1 2018/08/18 22:17:03 code coverage: enabled 2018/08/18 22:17:03 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/08/18 22:17:03 setuid sandbox: enabled 2018/08/18 22:17:03 namespace sandbox: enabled 2018/08/18 22:17:03 fault injection: enabled 2018/08/18 22:17:03 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/08/18 22:17:03 net packed injection: enabled 2018/08/18 22:17:03 net device setup: enabled [ 50.286258] random: crng init done 22:18:50 executing program 0: r0 = socket$inet6(0xa, 0x10000000006, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x6, 0x40}, 0x14) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x3, &(0x7f00000001c0), &(0x7f0000000240)='syzkaller\x00', 0x0, 0xa7, &(0x7f0000000280)=""/167, 0x0, 0x0, [], 0x0, 0x4}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000000c0)='vboxnet0-@\'\x00', r1}, 0x10) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r2 = socket$inet(0x10, 0x4000000003, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000220007031dfffd946f610500020000000000fd21fe1c4095421ba3a20400ff7e280000001100ffffba16a0aa1ce208b3ef090000000000008e3141eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 22:18:50 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x402c5828, &(0x7f00000001c0)={0x0, 0x0, 0x200000000}) pwrite64(r1, &(0x7f0000000040)=';', 0x1, 0x40000) lseek(r1, 0x0, 0x4) 22:18:50 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'vlan0\x00', 0x2003}) 22:18:50 executing program 2: r0 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={&(0x7f0000018ff4), 0xc, &(0x7f0000000140)={&(0x7f0000000480)={0x1c, 0x28, 0x1, 0x0, 0x0, {0x1}, [@nested={0x8, 0x0, [@generic='\fA']}]}, 0x1c}}, 0x0) 22:18:50 executing program 4: openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) 22:18:50 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x228001, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='syz1\x00'}, 0x10) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000240)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x200, 0x0) openat$cgroup_ro(r0, &(0x7f0000000140)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x4255b) 22:18:50 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x50, &(0x7f0000001680), &(0x7f0000000000)=0x1f3) 22:18:50 executing program 3: creat(&(0x7f0000000040)='./file0\x00', 0x1) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x857, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) [ 156.729876] IPVS: ftp: loaded support on port[0] = 21 [ 156.732122] IPVS: ftp: loaded support on port[0] = 21 [ 156.824681] IPVS: ftp: loaded support on port[0] = 21 [ 156.853807] IPVS: ftp: loaded support on port[0] = 21 [ 156.881449] IPVS: ftp: loaded support on port[0] = 21 [ 156.891954] IPVS: ftp: loaded support on port[0] = 21 [ 156.894444] IPVS: ftp: loaded support on port[0] = 21 [ 156.927130] IPVS: ftp: loaded support on port[0] = 21 [ 160.814992] ip (4716) used greatest stack depth: 53960 bytes left [ 161.098846] ip (4738) used greatest stack depth: 53688 bytes left [ 161.382628] ip (4751) used greatest stack depth: 53432 bytes left [ 161.531406] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.537926] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.570633] device bridge_slave_0 entered promiscuous mode [ 161.823370] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.829863] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.857246] device bridge_slave_0 entered promiscuous mode [ 161.926919] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.933394] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.968866] device bridge_slave_1 entered promiscuous mode [ 162.024835] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.031332] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.067294] device bridge_slave_0 entered promiscuous mode [ 162.094219] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.100720] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.131547] device bridge_slave_0 entered promiscuous mode [ 162.161299] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.167793] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.186088] device bridge_slave_0 entered promiscuous mode [ 162.196555] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.203113] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.231488] device bridge_slave_1 entered promiscuous mode [ 162.257160] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.263658] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.286666] device bridge_slave_0 entered promiscuous mode [ 162.321135] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.327623] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.354498] device bridge_slave_0 entered promiscuous mode [ 162.368090] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.374598] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.385819] device bridge_slave_0 entered promiscuous mode [ 162.399317] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 162.407445] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.413894] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.451348] device bridge_slave_1 entered promiscuous mode [ 162.463209] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.469677] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.486145] device bridge_slave_1 entered promiscuous mode [ 162.510588] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 162.519694] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.526189] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.555498] device bridge_slave_1 entered promiscuous mode [ 162.569931] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.576397] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.616772] device bridge_slave_1 entered promiscuous mode [ 162.647140] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.653625] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.699692] device bridge_slave_1 entered promiscuous mode [ 162.731201] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 162.741444] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.747890] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.790435] device bridge_slave_1 entered promiscuous mode [ 162.814854] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 162.825722] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 162.845091] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 162.853931] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 162.862156] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 162.947775] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 163.111625] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 163.122832] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 163.133150] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 163.145525] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 163.218924] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 163.326486] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 163.466214] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 163.557364] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 163.801624] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 163.863013] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 163.995631] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 164.118985] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 164.136772] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 164.178600] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 164.197436] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 164.209825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 164.229328] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 164.252505] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 164.301723] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 164.376965] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 164.459913] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 164.466981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 164.482686] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 164.510097] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 164.517379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 164.547987] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 164.559825] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 164.594580] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 164.679828] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 164.686862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 164.731820] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 164.786467] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 164.793566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 164.816101] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 164.826458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 164.874843] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 164.881862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 164.944796] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 164.951840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 164.976144] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 164.983219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 164.999296] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 165.006448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 165.078307] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 165.085349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 165.170768] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 165.177734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 165.233438] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 165.240581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 165.284920] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 165.291969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 165.305172] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 165.335915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 165.514978] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 165.522195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 165.566910] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 165.583268] team0: Port device team_slave_0 added [ 165.804186] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 165.846227] team0: Port device team_slave_0 added [ 165.984267] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 166.025903] team0: Port device team_slave_1 added [ 166.045519] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 166.065688] team0: Port device team_slave_0 added [ 166.101963] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 166.118993] team0: Port device team_slave_0 added [ 166.132550] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 166.155228] team0: Port device team_slave_0 added [ 166.180960] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 166.216868] team0: Port device team_slave_1 added [ 166.263168] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 166.287140] team0: Port device team_slave_0 added [ 166.314401] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 166.343233] team0: Port device team_slave_0 added [ 166.359207] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 166.369388] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 166.393273] team0: Port device team_slave_1 added [ 166.417227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 166.429417] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.453238] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 166.469537] team0: Port device team_slave_0 added [ 166.508377] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 166.534319] team0: Port device team_slave_1 added [ 166.549166] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 166.556175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 166.579633] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.602976] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 166.612291] team0: Port device team_slave_1 added [ 166.623959] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 166.650166] team0: Port device team_slave_1 added [ 166.678442] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 166.685500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 166.700296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.734901] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 166.741931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 166.758300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 166.799882] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 166.826207] team0: Port device team_slave_1 added [ 166.849192] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 166.858577] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 166.874372] team0: Port device team_slave_1 added [ 166.898340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 166.912572] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.945752] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 166.955889] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 166.966745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 167.010432] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 167.031934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 167.050070] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 167.070108] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 167.078853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 167.102527] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 167.127107] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 167.138320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 167.156405] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 167.193235] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 167.203391] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 167.218473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 167.260750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 167.276262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 167.291437] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 167.325132] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 167.335130] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 167.346547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 167.369921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 167.380109] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 167.389845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 167.408911] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 167.417262] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 167.428561] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 167.435873] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 167.444298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 167.483777] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 167.509984] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 167.543694] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 167.571153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 167.601822] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 167.617911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 167.626412] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 167.636547] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 167.645116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 167.654908] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 167.669990] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 167.696182] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 167.703858] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 167.714201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 167.734614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 167.744477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 167.765619] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 167.780858] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 167.790367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 167.830627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 167.851966] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 167.882878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 167.896476] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 167.903890] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 167.912231] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 167.931295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 167.954446] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 167.988594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 168.012511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 168.031483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 168.049469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 168.097825] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 168.106655] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 168.114612] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 168.125165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 168.143829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 168.179486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 168.213669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 168.240549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 168.272616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 168.295226] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 168.313399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 168.323729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 168.343220] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 168.350766] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 168.383626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 168.435444] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 168.443469] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 168.498398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 168.620550] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 168.628352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 168.651353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 171.293653] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.300170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.307128] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.313603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.367619] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 171.378547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 171.419359] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.425904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.432868] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.439350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.459169] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 171.473093] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.479562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.486682] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.493130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.562624] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 171.578836] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.585351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.592747] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.599239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.623649] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 171.693655] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.700135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.707075] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.713529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.733779] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 171.896162] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.902652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.909539] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.915993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.965696] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 172.003555] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.010106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.016985] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.023528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.068358] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 172.279405] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.285919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.292810] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.299401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.350666] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 172.387010] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 172.430465] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 172.474285] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 172.504241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 172.540969] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 172.558744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 172.574125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 184.123233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.246754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.459296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.600778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.688227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.743901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.893162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.061014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.404680] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 185.417421] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 185.686721] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 185.788214] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 185.900074] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 185.946151] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 186.033442] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 186.223337] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 186.602849] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 186.609320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 186.625357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 186.668153] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 186.676189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 186.702959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 186.816158] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 186.822501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 186.840196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 187.059234] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 187.065619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 187.080915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 187.129489] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 187.136600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 187.158678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 187.213375] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 187.219753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 187.232965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 187.340167] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 187.346630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 187.358594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 187.466833] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 187.473208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 187.488834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 187.786082] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.041130] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.085783] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.260829] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.366071] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.466802] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.580115] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.636257] 8021q: adding VLAN 0 to HW filter on device team0 22:19:30 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffefffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x30}, 0xc) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[@ANYBLOB='#'], 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x8400000000000002}, 0x8) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) [ 195.521171] sctp: failed to load transform for md5: -2 22:19:30 executing program 4: [ 195.841899] ================================================================== [ 195.849337] BUG: KMSAN: uninit-value in tipc_nl_compat_doit+0x40b/0x9c0 [ 195.856117] CPU: 1 PID: 6589 Comm: syz-executor2 Not tainted 4.18.0-rc8+ #34 [ 195.863313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 195.872683] Call Trace: [ 195.875309] dump_stack+0x17c/0x1c0 [ 195.878976] kmsan_report+0x188/0x2a0 [ 195.882821] __msan_warning+0x70/0xc0 [ 195.886659] tipc_nl_compat_doit+0x40b/0x9c0 22:19:30 executing program 7: [ 195.891096] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 195.896607] tipc_nl_compat_recv+0x119a/0x2700 [ 195.901233] ? tipc_nl_node_get_link+0x900/0x900 [ 195.906028] ? tipc_nl_compat_link_set+0x1870/0x1870 [ 195.911193] ? tipc_netlink_compat_stop+0x40/0x40 [ 195.916102] genl_rcv_msg+0x16b1/0x1840 [ 195.920200] netlink_rcv_skb+0x36e/0x5f0 [ 195.924315] ? genl_unbind+0x350/0x350 [ 195.928248] genl_rcv+0x63/0x80 [ 195.931564] netlink_unicast+0x1492/0x1740 [ 195.935846] ? genl_pernet_exit+0x90/0x90 [ 195.940044] netlink_sendmsg+0x114c/0x1350 [ 195.944348] ___sys_sendmsg+0xe32/0x1250 [ 195.948469] ? netlink_getsockopt+0x11c0/0x11c0 [ 195.953184] ? __fget_light+0x53/0x700 [ 195.957104] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 195.962510] ? __fget_light+0x6a3/0x700 [ 195.966544] __x64_sys_sendmsg+0x32d/0x460 [ 195.970829] ? ___sys_sendmsg+0x1250/0x1250 [ 195.975179] do_syscall_64+0x15b/0x220 [ 195.979111] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 195.984316] RIP: 0033:0x457089 22:19:31 executing program 4: [ 195.987508] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 196.007033] RSP: 002b:00007f7e36ef2c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.014792] RAX: ffffffffffffffda RBX: 00007f7e36ef36d4 RCX: 0000000000457089 [ 196.022086] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 196.029379] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 22:19:31 executing program 7: 22:19:31 executing program 5: [ 196.036673] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 196.043966] R13: 00000000004d4088 R14: 00000000004c8ab0 R15: 0000000000000000 [ 196.051278] [ 196.052916] Uninit was created at: [ 196.056498] kmsan_internal_poison_shadow+0xb8/0x1b0 [ 196.061631] kmsan_kmalloc+0x98/0x100 [ 196.065475] kmsan_slab_alloc+0x10/0x20 [ 196.069494] __kmalloc_node_track_caller+0xb4c/0x11d0 [ 196.074733] __alloc_skb+0x2ce/0x9b0 [ 196.078489] netlink_sendmsg+0x776/0x1350 [ 196.082669] ___sys_sendmsg+0xe32/0x1250 [ 196.086752] __x64_sys_sendmsg+0x32d/0x460 [ 196.091014] do_syscall_64+0x15b/0x220 [ 196.094926] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 196.100120] ================================================================== [ 196.107513] Disabling lock debugging due to kernel taint [ 196.112974] Kernel panic - not syncing: panic_on_warn set ... [ 196.112974] [ 196.120370] CPU: 1 PID: 6589 Comm: syz-executor2 Tainted: G B 4.18.0-rc8+ #34 [ 196.128978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 196.138461] Call Trace: 22:19:31 executing program 7: [ 196.141076] dump_stack+0x17c/0x1c0 [ 196.144746] panic+0x3c3/0x9a0 [ 196.147994] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 196.153491] kmsan_report+0x29e/0x2a0 [ 196.157334] __msan_warning+0x70/0xc0 [ 196.161163] tipc_nl_compat_doit+0x40b/0x9c0 [ 196.165602] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 196.171110] tipc_nl_compat_recv+0x119a/0x2700 [ 196.175727] ? tipc_nl_node_get_link+0x900/0x900 [ 196.180504] ? tipc_nl_compat_link_set+0x1870/0x1870 [ 196.185652] ? tipc_netlink_compat_stop+0x40/0x40 22:19:31 executing program 5: [ 196.190515] genl_rcv_msg+0x16b1/0x1840 [ 196.194565] netlink_rcv_skb+0x36e/0x5f0 [ 196.198661] ? genl_unbind+0x350/0x350 [ 196.202611] genl_rcv+0x63/0x80 [ 196.205917] netlink_unicast+0x1492/0x1740 [ 196.210193] ? genl_pernet_exit+0x90/0x90 [ 196.214383] netlink_sendmsg+0x114c/0x1350 [ 196.218663] ___sys_sendmsg+0xe32/0x1250 [ 196.222751] ? netlink_getsockopt+0x11c0/0x11c0 [ 196.227464] ? __fget_light+0x53/0x700 [ 196.231377] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 196.236768] ? __fget_light+0x6a3/0x700 [ 196.240798] __x64_sys_sendmsg+0x32d/0x460 [ 196.245084] ? ___sys_sendmsg+0x1250/0x1250 [ 196.249427] do_syscall_64+0x15b/0x220 [ 196.253361] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 196.258576] RIP: 0033:0x457089 [ 196.261778] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 196.281295] RSP: 002b:00007f7e36ef2c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.289032] RAX: ffffffffffffffda RBX: 00007f7e36ef36d4 RCX: 0000000000457089 [ 196.296324] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 196.303606] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 196.310892] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 196.318189] R13: 00000000004d4088 R14: 00000000004c8ab0 R15: 0000000000000000 [ 196.325824] Dumping ftrace buffer: [ 196.329360] (ftrace buffer empty) [ 196.333062] Kernel Offset: disabled [ 196.336700] Rebooting in 86400 seconds..