[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 33.964462] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 36.996039] random: sshd: uninitialized urandom read (32 bytes read) [ 37.300045] random: sshd: uninitialized urandom read (32 bytes read) [ 38.281879] random: sshd: uninitialized urandom read (32 bytes read) [ 38.566299] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.77' (ECDSA) to the list of known hosts. [ 44.225025] random: sshd: uninitialized urandom read (32 bytes read) [ 44.366393] IPVS: ftp: loaded support on port[0] = 21 [ 44.531387] ip (4284) used greatest stack depth: 53496 bytes left [ 44.596877] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.603316] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.611083] device bridge_slave_0 entered promiscuous mode [ 44.638111] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.644673] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.652460] device bridge_slave_1 entered promiscuous mode [ 44.678052] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.704161] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.778729] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 44.807415] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 44.924075] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 44.931898] team0: Port device team_slave_0 added [ 44.957315] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 44.965217] team0: Port device team_slave_1 added [ 44.991477] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.021000] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.049950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.079369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready RTNETLINK answers: Operation not supported RTNETLINK answers: No buffer space available [ 45.325671] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.332432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.339312] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.345802] bridge0: port 1(bridge_slave_0) entered forwarding state RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported [ 45.600209] ip (4373) used greatest stack depth: 53464 bytes left RTNETLINK answers: Operation not supported RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument [ 46.240868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.326743] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 46.410722] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 46.417057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.425833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.510678] 8021q: adding VLAN 0 to HW filter on device team0 executing program [ 47.011078] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 47.018335] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 47.096203] ================================================================== [ 47.103631] BUG: KMSAN: uninit-value in memcmp+0x11d/0x180 [ 47.109265] CPU: 1 PID: 4510 Comm: syz-executor267 Not tainted 4.19.0-rc3+ #48 [ 47.116630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 47.126172] Call Trace: [ 47.129093] dump_stack+0x14b/0x190 [ 47.132811] kmsan_report+0x183/0x2b0 [ 47.136633] __msan_warning+0x70/0xc0 [ 47.140458] memcmp+0x11d/0x180 [ 47.143769] __dev_mc_del+0x169/0x6c0 [ 47.147619] dev_mc_del+0x6d/0x80 [ 47.151089] igmp_group_dropped+0x21a/0x1280 [ 47.155576] ? kmsan_set_origin_inline+0x6b/0x120 [ 47.160447] ? kmsan_set_origin_inline+0x6b/0x120 [ 47.165306] ip_mc_down+0x1d9/0x3e0 [ 47.168948] inetdev_event+0x238/0x1d70 [ 47.172955] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 47.178334] ? arp_netdev_event+0xe0/0x1b0 [ 47.183420] ? ipv4_doint_and_flush+0x280/0x280 [ 47.188119] ? ipv4_doint_and_flush+0x280/0x280 [ 47.192951] raw_notifier_call_chain+0x13e/0x240 [ 47.197750] dev_close_many+0x627/0x9e0 [ 47.201747] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 47.207127] rollback_registered_many+0x9eb/0x2040 [ 47.212065] ? kmsan_set_origin_inline+0x6b/0x120 [ 47.217122] ? __list_add_valid+0xb8/0x450 [ 47.221376] unregister_netdevice_queue+0x547/0xa40 [ 47.226477] __tun_detach+0x220c/0x2c70 [ 47.230474] ? rcu_all_qs+0x2e/0x1f0 [ 47.234213] ? _cond_resched+0x38/0xc0 [ 47.238130] tun_chr_close+0xda/0x1c0 [ 47.242006] ? tun_chr_open+0x750/0x750 [ 47.246104] __fput+0x4cf/0xc20 [ 47.249399] ? fput+0x2e0/0x2e0 [ 47.252710] ____fput+0x37/0x40 [ 47.256151] task_work_run+0x22e/0x2b0 [ 47.260053] prepare_exit_to_usermode+0x33e/0x410 [ 47.264908] syscall_return_slowpath+0xdb/0x700 [ 47.269599] ? __close_fd+0x465/0x4c0 [ 47.273430] ? __se_sys_close+0x72/0x140 [ 47.277602] do_syscall_64+0xde/0x100 [ 47.281434] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 47.286662] RIP: 0033:0x401540 [ 47.289885] Code: 01 f0 ff ff 0f 83 b0 0a 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 83 3d ed 22 2d 00 00 75 14 b8 03 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 84 0a 00 00 c3 48 83 ec 08 e8 3a 01 00 00 [ 47.308880] RSP: 002b:00007fffbb917ce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 47.316668] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000401540 [ 47.324027] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 47.331415] RBP: 00000000006cc018 R08: 0000000000000100 R09: 0000000000000100 [ 47.339183] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000000 [ 47.346465] R13: 00000000004024e0 R14: 0000000000000000 R15: 0000000000000000 [ 47.353763] [ 47.355625] Local variable description: ----buf.i@igmp_group_dropped [ 47.362114] Variable was created at: [ 47.365834] igmp_group_dropped+0x49/0x1280 [ 47.370270] ip_mc_down+0x1d9/0x3e0 [ 47.373894] ================================================================== [ 47.381357] Disabling lock debugging due to kernel taint [ 47.386808] Kernel panic - not syncing: panic_on_warn set ... [ 47.386808] [ 47.394183] CPU: 1 PID: 4510 Comm: syz-executor267 Tainted: G B 4.19.0-rc3+ #48 [ 47.402941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 47.412295] Call Trace: [ 47.414895] dump_stack+0x14b/0x190 [ 47.418552] panic+0x35d/0x8cb [ 47.421895] ? ip_mc_down+0x1d9/0x3e0 [ 47.425734] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 47.431205] kmsan_report+0x2a8/0x2b0 [ 47.435081] __msan_warning+0x70/0xc0 [ 47.438911] memcmp+0x11d/0x180 [ 47.442224] __dev_mc_del+0x169/0x6c0 [ 47.446062] dev_mc_del+0x6d/0x80 [ 47.449605] igmp_group_dropped+0x21a/0x1280 [ 47.454049] ? kmsan_set_origin_inline+0x6b/0x120 [ 47.458987] ? kmsan_set_origin_inline+0x6b/0x120 [ 47.463845] ip_mc_down+0x1d9/0x3e0 [ 47.467483] inetdev_event+0x238/0x1d70 [ 47.471485] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 47.476872] ? arp_netdev_event+0xe0/0x1b0 [ 47.481115] ? ipv4_doint_and_flush+0x280/0x280 [ 47.485877] ? ipv4_doint_and_flush+0x280/0x280 [ 47.490631] raw_notifier_call_chain+0x13e/0x240 [ 47.495405] dev_close_many+0x627/0x9e0 [ 47.499388] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 47.504765] rollback_registered_many+0x9eb/0x2040 [ 47.509726] ? kmsan_set_origin_inline+0x6b/0x120 [ 47.514603] ? __list_add_valid+0xb8/0x450 [ 47.518948] unregister_netdevice_queue+0x547/0xa40 [ 47.524057] __tun_detach+0x220c/0x2c70 [ 47.528054] ? rcu_all_qs+0x2e/0x1f0 [ 47.531775] ? _cond_resched+0x38/0xc0 [ 47.535736] tun_chr_close+0xda/0x1c0 [ 47.539579] ? tun_chr_open+0x750/0x750 [ 47.543596] __fput+0x4cf/0xc20 [ 47.546907] ? fput+0x2e0/0x2e0 [ 47.550197] ____fput+0x37/0x40 [ 47.553483] task_work_run+0x22e/0x2b0 [ 47.557445] prepare_exit_to_usermode+0x33e/0x410 [ 47.562299] syscall_return_slowpath+0xdb/0x700 [ 47.566976] ? __close_fd+0x465/0x4c0 [ 47.570812] ? __se_sys_close+0x72/0x140 [ 47.574954] do_syscall_64+0xde/0x100 [ 47.578768] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 47.584111] RIP: 0033:0x401540 [ 47.587308] Code: 01 f0 ff ff 0f 83 b0 0a 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 83 3d ed 22 2d 00 00 75 14 b8 03 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 84 0a 00 00 c3 48 83 ec 08 e8 3a 01 00 00 [ 47.606219] RSP: 002b:00007fffbb917ce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 47.613948] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000401540 [ 47.621231] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 47.628570] RBP: 00000000006cc018 R08: 0000000000000100 R09: 0000000000000100 [ 47.635860] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000000 [ 47.643139] R13: 00000000004024e0 R14: 0000000000000000 R15: 0000000000000000 [ 47.651320] Kernel Offset: disabled [ 47.655025] Rebooting in 86400 seconds..