[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 33.769476] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. [ 34.704642] random: sshd: uninitialized urandom read (32 bytes read) [ 35.066381] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 36.225188] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.42' (ECDSA) to the list of known hosts. [ 41.951276] random: sshd: uninitialized urandom read (32 bytes read) 2018/09/07 22:24:40 fuzzer started [ 43.324815] random: cc1: uninitialized urandom read (8 bytes read) 2018/09/07 22:24:42 dialing manager at 10.128.0.26:38943 2018/09/07 22:24:42 syscalls: 1 2018/09/07 22:24:42 code coverage: enabled 2018/09/07 22:24:42 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/09/07 22:24:42 setuid sandbox: enabled 2018/09/07 22:24:42 namespace sandbox: enabled 2018/09/07 22:24:42 fault injection: enabled 2018/09/07 22:24:42 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/09/07 22:24:42 net packed injection: enabled 2018/09/07 22:24:42 net device setup: enabled [ 47.207598] random: crng init done 22:26:38 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f00000001c0), 0x0, 0x2f2, 0x0) 22:26:38 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x3ffffeb, 0x0) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) 22:26:38 executing program 7: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000380)=0x80) write$nbd(r1, &(0x7f0000000640), 0x10) 22:26:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) creat(&(0x7f0000000100)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000000c0)) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00'}, 0x10) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 22:26:38 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000300), 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ipv6_route\x00') sendfile(r1, r2, &(0x7f0000000040), 0x88001) write$binfmt_elf32(r1, &(0x7f0000000400)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "", [[], []]}, 0x258) 22:26:38 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x2000000008912, &(0x7f0000000080)="153f6234488dd25d766070") read(0xffffffffffffffff, &(0x7f0000000140)=""/197, 0xc5) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r2) 22:26:38 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000004f80)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000000)={0x2, 0x0, 0x11, &(0x7f0000000200)="00ce08fe03025177dc7ece7709bef07a0d"}) 22:26:38 executing program 6: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f0000000080)=[{0x6}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001cc0)={&(0x7f0000000000)={0x10, 0x9effffff}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="000000000000000008000d000000000008004cdf5b775dbc"], 0x1}}, 0x0) [ 161.925023] IPVS: ftp: loaded support on port[0] = 21 [ 161.960184] IPVS: ftp: loaded support on port[0] = 21 [ 161.991887] IPVS: ftp: loaded support on port[0] = 21 [ 162.015663] IPVS: ftp: loaded support on port[0] = 21 [ 162.028217] IPVS: ftp: loaded support on port[0] = 21 [ 162.029587] IPVS: ftp: loaded support on port[0] = 21 [ 162.039967] IPVS: ftp: loaded support on port[0] = 21 [ 162.057947] IPVS: ftp: loaded support on port[0] = 21 [ 164.633578] ip (4496) used greatest stack depth: 53800 bytes left [ 165.761421] ip (4554) used greatest stack depth: 53736 bytes left [ 166.181457] ip (4584) used greatest stack depth: 53496 bytes left [ 167.032501] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.039065] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.081433] device bridge_slave_0 entered promiscuous mode [ 167.119380] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.125937] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.164961] device bridge_slave_0 entered promiscuous mode [ 167.180065] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.186563] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.198974] device bridge_slave_0 entered promiscuous mode [ 167.214512] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.221021] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.262463] device bridge_slave_0 entered promiscuous mode [ 167.289502] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.296046] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.312702] device bridge_slave_0 entered promiscuous mode [ 167.336852] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.343429] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.363380] device bridge_slave_0 entered promiscuous mode [ 167.373693] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.380304] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.392348] device bridge_slave_0 entered promiscuous mode [ 167.401175] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.407702] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.422945] device bridge_slave_0 entered promiscuous mode [ 167.432617] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.439102] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.460025] device bridge_slave_1 entered promiscuous mode [ 167.489395] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.495914] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.518783] device bridge_slave_1 entered promiscuous mode [ 167.533352] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.539925] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.573772] device bridge_slave_1 entered promiscuous mode [ 167.599329] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.605863] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.628606] device bridge_slave_1 entered promiscuous mode [ 167.660438] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.666971] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.692121] device bridge_slave_1 entered promiscuous mode [ 167.701562] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.708103] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.739459] device bridge_slave_1 entered promiscuous mode [ 167.746616] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.753127] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.782225] device bridge_slave_1 entered promiscuous mode [ 167.817086] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 167.827862] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 167.839635] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 167.848376] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 167.856591] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.863125] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.909540] device bridge_slave_1 entered promiscuous mode [ 167.938394] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 168.034177] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 168.066561] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 168.104138] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 168.142325] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 168.153682] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 168.188793] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 168.201186] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 168.279523] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 168.398134] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 168.448859] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 168.514912] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 168.925318] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 169.011075] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 169.120518] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 169.140916] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 169.166937] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 169.275949] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 169.325905] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 169.392947] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 169.406355] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 169.433585] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 169.461800] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 169.474101] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 169.550490] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 169.582121] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 169.599781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 169.660572] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 169.667705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 169.693405] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 169.758043] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 169.789727] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 169.796898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 169.819196] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 169.826762] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 169.834521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 169.872766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 169.912967] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 169.930471] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 169.937614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 170.043740] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 170.050821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 170.069141] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 170.076222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 170.112836] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 170.119957] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 170.134839] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 170.148318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 170.166221] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 170.175692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 170.199797] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 170.206951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 170.244941] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 170.252596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 170.366557] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 170.373671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 170.457564] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 170.466510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 170.591385] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 170.598718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 170.950752] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 170.995595] team0: Port device team_slave_0 added [ 171.105533] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 171.133369] team0: Port device team_slave_0 added [ 171.151123] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 171.172740] team0: Port device team_slave_0 added [ 171.228722] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 171.255600] team0: Port device team_slave_0 added [ 171.276076] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 171.305577] team0: Port device team_slave_0 added [ 171.340596] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 171.364501] team0: Port device team_slave_0 added [ 171.384160] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 171.420534] team0: Port device team_slave_0 added [ 171.438321] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 171.447687] team0: Port device team_slave_1 added [ 171.470744] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 171.494699] team0: Port device team_slave_1 added [ 171.521217] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 171.546870] team0: Port device team_slave_1 added [ 171.563128] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 171.590518] team0: Port device team_slave_1 added [ 171.608670] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 171.619894] team0: Port device team_slave_0 added [ 171.655746] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 171.682379] team0: Port device team_slave_1 added [ 171.698415] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 171.706186] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 171.732895] team0: Port device team_slave_1 added [ 171.762609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 171.789651] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 171.812081] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 171.824659] team0: Port device team_slave_1 added [ 171.857848] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 171.865427] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 171.872410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 171.887824] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 171.918890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 171.952115] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 171.969591] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 171.991315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 172.015620] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 172.038117] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 172.047994] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 172.056139] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 172.075408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 172.092557] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 172.115312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 172.148352] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 172.167042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 172.195165] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 172.227917] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 172.236646] team0: Port device team_slave_1 added [ 172.251484] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 172.266374] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 172.273456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 172.290952] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 172.306295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 172.321742] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 172.349997] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 172.357802] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 172.366125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 172.394489] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 172.425404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 172.451574] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 172.469033] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 172.477172] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 172.485177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 172.512815] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 172.535708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 172.564626] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 172.590641] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 172.598188] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 172.611696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 172.649584] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 172.659884] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 172.671176] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 172.682134] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 172.697223] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 172.704955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 172.752654] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 172.778320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 172.808833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 172.839334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 172.860805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 172.887379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 172.902677] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 172.911954] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 172.921747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 172.938869] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 172.947818] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 172.958632] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 172.983914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 172.992499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 173.007995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 173.054515] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 173.061608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 173.076560] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 173.101773] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 173.110857] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 173.120295] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 173.128223] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 173.139827] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 173.147944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 173.190540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 173.216016] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 173.252376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 173.279846] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 173.317769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 173.340575] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 173.350510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 173.358935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 173.367383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 173.382461] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 173.408728] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 173.418883] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 173.428962] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 173.441577] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 173.452308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 173.463488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 173.487470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 173.507049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 173.545673] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 173.554093] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 173.571043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 173.723558] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 173.731054] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 173.743877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 176.677529] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.684072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.691041] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.697517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.731446] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 176.741673] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 176.768780] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.775362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.782320] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.788786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.829225] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 176.845867] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.852361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.859280] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.865733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.880008] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 176.892825] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.899333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.906315] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.912812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.951323] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 176.966303] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.972806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.979730] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.986269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.056922] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 177.071656] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.078188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.085134] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.091636] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.101706] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 177.131471] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.138004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.144926] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.151426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.204701] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 177.213427] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.220497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.227510] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.233993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.302747] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 177.750914] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 177.763445] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 177.806671] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 177.851642] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 177.880451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 177.896361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 177.909082] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 182.840306] ip (5426) used greatest stack depth: 53464 bytes left [ 189.432715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.484498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.693226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.752479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.809901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.844743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.867541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.140824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.532938] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 190.731726] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 190.901131] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 190.910167] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 191.006470] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 191.041693] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 191.068109] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 191.336611] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 191.746006] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 191.752650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 191.768585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 191.948507] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 191.959504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 191.980670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 192.100853] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 192.107363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 192.119298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 192.176599] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 192.183023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 192.192212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 192.228946] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 192.239691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 192.251696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 192.311704] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 192.318093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 192.331019] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 192.360039] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 192.379040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 192.413588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 192.614584] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 192.622730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 192.639341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 193.066528] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.283034] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.304447] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.355096] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.437519] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.597717] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.629680] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.855784] 8021q: adding VLAN 0 to HW filter on device team0 22:27:18 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'bond0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x40000000}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x1b3, 0x0) 22:27:18 executing program 0: 22:27:18 executing program 4: [ 201.036616] ================================================================== [ 201.044101] BUG: KMSAN: uninit-value in bond_start_xmit+0x1ab8/0x2b90 [ 201.050728] CPU: 0 PID: 6451 Comm: syz-executor1 Not tainted 4.19.0-rc1+ #42 [ 201.057947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 201.067340] Call Trace: [ 201.069964] dump_stack+0x14b/0x190 [ 201.073639] kmsan_report+0x183/0x2b0 [ 201.077490] __msan_warning+0x70/0xc0 [ 201.081353] bond_start_xmit+0x1ab8/0x2b90 [ 201.085641] ? kmsan_set_origin_inline+0x6b/0x120 [ 201.090524] ? __msan_poison_alloca+0x173/0x1f0 [ 201.095224] ? netif_skb_features+0xb57/0x1060 [ 201.099852] ? bond_close+0x1d0/0x1d0 [ 201.103681] dev_hard_start_xmit+0x5df/0xc20 [ 201.108154] __dev_queue_xmit+0x2f35/0x3ab0 [ 201.112548] dev_queue_xmit+0x4b/0x60 [ 201.116377] pppoe_sendmsg+0xb09/0xb50 [ 201.120314] ___sys_sendmsg+0xe70/0x1290 [ 201.124427] ? pppoe_getname+0x150/0x150 [ 201.128588] __sys_sendmmsg+0x4ac/0x930 [ 201.132602] ? prepare_exit_to_usermode+0x46/0x410 [ 201.137567] ? syscall_return_slowpath+0xdb/0x700 [ 201.142477] __se_sys_sendmmsg+0xbd/0xe0 [ 201.146582] __x64_sys_sendmmsg+0x56/0x70 [ 201.150762] do_syscall_64+0xb8/0x100 [ 201.154605] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 201.159818] RIP: 0033:0x457099 [ 201.163387] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 201.182332] RSP: 002b:00007f3dd38ddc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 201.190080] RAX: ffffffffffffffda RBX: 00007f3dd38de6d4 RCX: 0000000000457099 [ 201.197376] RDX: 00000000000001b3 RSI: 00000000200000c0 RDI: 0000000000000004 [ 201.204677] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 201.211974] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 201.219269] R13: 00000000004d47a0 R14: 00000000004c8d67 R15: 0000000000000000 [ 201.226582] [ 201.228222] Uninit was created at: [ 201.231804] kmsan_internal_poison_shadow+0xb8/0x1b0 [ 201.236942] kmsan_kmalloc+0x98/0x100 [ 201.240771] kmsan_slab_alloc+0x10/0x20 [ 201.244775] __kmalloc_node_track_caller+0x9e7/0x1160 [ 201.249992] __alloc_skb+0x2f5/0x9e0 [ 201.253731] sock_wmalloc+0x13e/0x6b0 [ 201.257565] pppoe_sendmsg+0x40e/0xb50 [ 201.261479] ___sys_sendmsg+0xe70/0x1290 [ 201.265577] __sys_sendmmsg+0x4ac/0x930 [ 201.269577] __se_sys_sendmmsg+0xbd/0xe0 [ 201.273663] __x64_sys_sendmmsg+0x56/0x70 [ 201.277845] do_syscall_64+0xb8/0x100 [ 201.281673] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 201.286876] ================================================================== [ 201.294266] Disabling lock debugging due to kernel taint [ 201.299741] Kernel panic - not syncing: panic_on_warn set ... [ 201.299741] [ 201.307139] CPU: 0 PID: 6451 Comm: syz-executor1 Tainted: G B 4.19.0-rc1+ #42 [ 201.315733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 201.325110] Call Trace: [ 201.327739] dump_stack+0x14b/0x190 [ 201.331411] panic+0x35d/0x8cb [ 201.334665] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 201.340165] kmsan_report+0x2a8/0x2b0 [ 201.344009] __msan_warning+0x70/0xc0 [ 201.347854] bond_start_xmit+0x1ab8/0x2b90 [ 201.352139] ? kmsan_set_origin_inline+0x6b/0x120 [ 201.357011] ? __msan_poison_alloca+0x173/0x1f0 [ 201.361722] ? netif_skb_features+0xb57/0x1060 [ 201.366360] ? bond_close+0x1d0/0x1d0 [ 201.370198] dev_hard_start_xmit+0x5df/0xc20 [ 201.374672] __dev_queue_xmit+0x2f35/0x3ab0 [ 201.379066] dev_queue_xmit+0x4b/0x60 [ 201.382917] pppoe_sendmsg+0xb09/0xb50 [ 201.386857] ___sys_sendmsg+0xe70/0x1290 [ 201.390966] ? pppoe_getname+0x150/0x150 [ 201.395103] __sys_sendmmsg+0x4ac/0x930 [ 201.399115] ? prepare_exit_to_usermode+0x46/0x410 [ 201.404072] ? syscall_return_slowpath+0xdb/0x700 [ 201.408986] __se_sys_sendmmsg+0xbd/0xe0 [ 201.413085] __x64_sys_sendmmsg+0x56/0x70 [ 201.417261] do_syscall_64+0xb8/0x100 [ 201.421094] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 201.426309] RIP: 0033:0x457099 [ 201.429533] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 201.448467] RSP: 002b:00007f3dd38ddc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 201.456215] RAX: ffffffffffffffda RBX: 00007f3dd38de6d4 RCX: 0000000000457099 [ 201.463510] RDX: 00000000000001b3 RSI: 00000000200000c0 RDI: 0000000000000004 [ 201.470798] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 201.478089] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 201.485384] R13: 00000000004d47a0 R14: 00000000004c8d67 R15: 0000000000000000 [ 201.490283] hrtimer: interrupt took 90711 ns [ 201.497461] Dumping ftrace buffer: [ 201.501003] (ftrace buffer empty) [ 201.504702] Kernel Offset: disabled [ 201.508328] Rebooting in 86400 seconds..