[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 35.730524] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 37.479359] random: sshd: uninitialized urandom read (32 bytes read) [ 37.883687] random: sshd: uninitialized urandom read (32 bytes read) [ 39.278504] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.27' (ECDSA) to the list of known hosts. [ 45.061689] random: sshd: uninitialized urandom read (32 bytes read) 2018/09/11 20:48:35 fuzzer started [ 46.589662] random: cc1: uninitialized urandom read (8 bytes read) 2018/09/11 20:48:38 dialing manager at 10.128.0.26:36523 2018/09/11 20:48:38 syscalls: 1 2018/09/11 20:48:38 code coverage: enabled 2018/09/11 20:48:38 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/09/11 20:48:38 setuid sandbox: enabled 2018/09/11 20:48:38 namespace sandbox: enabled 2018/09/11 20:48:38 fault injection: enabled 2018/09/11 20:48:38 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/09/11 20:48:38 net packed injection: enabled 2018/09/11 20:48:38 net device setup: enabled [ 50.746422] random: crng init done 20:49:46 executing program 0: 20:49:46 executing program 2: getpgid(0x0) ioprio_set$pid(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000009c0)='smaps\x00') sendto$unix(0xffffffffffffffff, &(0x7f0000000a00), 0x0, 0x0, &(0x7f0000000a80)=@abs, 0x6e) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) write$P9_RLERROR(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0, &(0x7f0000000bc0)) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=@known='system.advise\x00', &(0x7f0000000180)='md5sum^\x00', 0x8, 0x0) fstat(0xffffffffffffff9c, &(0x7f0000000380)) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000001c0)) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x8}, &(0x7f0000000480), 0x0) getgroups(0x0, &(0x7f0000000480)) getgroups(0x0, &(0x7f0000000200)) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000240)={0x7}, 0x7) getresgid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)) getegid() seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x58fe4}]}) syz_execute_func(&(0x7f0000000400)="42805da0cf0fef69dc0f01eece73fe19fa380f38211af3f081768cc8000000c481b5e5bc2b0000002167f00fbab204000000ca6b2179dae5e54175450f2e1ac4010d64ac1e5d31a3b744dbe271fb26f00fbb9500000000") 20:49:46 executing program 5: getpgid(0x0) ioprio_set$pid(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000009c0)='smaps\x00') sendto$unix(0xffffffffffffffff, &(0x7f0000000a00), 0x0, 0x0, &(0x7f0000000a80)=@abs, 0x6e) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) write$P9_RLERROR(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0, &(0x7f0000000bc0)) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=@known='system.advise\x00', &(0x7f0000000180)='md5sum^\x00', 0x8, 0x0) fstat(0xffffffffffffff9c, &(0x7f0000000380)) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000001c0)) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x8}, &(0x7f0000000480), 0x0) getgroups(0x0, &(0x7f0000000480)) seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x58fe4}]}) syz_execute_func(&(0x7f0000000400)="42805da0cf0fef69dc0f01eece73fe19fa380f38211af3f081768cc8000000c481b5e5bc2b0000002167f00fbab204000000ca6b2179dae5e54175450f2e1ac4010d64ac1e5d31a3b744dbe271fb26f00fbb9500000000") 20:49:46 executing program 3: clock_adjtime(0x0, &(0x7f0000000340)) unshare(0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/if_inet6\x00') socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000280)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f00000000c0)) getitimer(0x0, &(0x7f0000000240)) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000300), &(0x7f0000000040)=0x4) time(&(0x7f0000000640)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='eth0cgroup(\x00'}, 0x10) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x58fe4}]}) syz_execute_func(&(0x7f0000000800)="42805da0bd0fef69dc0f01eece6dfa19fa380f38218f8978972bf0817e768cc80000000081b5e5bc2b0000002167f00fbab204000000ca6b2179dae5e54175450f2e1ac46279db67444472e671fb0703") 20:49:46 executing program 4: sysinfo(&(0x7f00000008c0)=""/4096) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) getresgid(&(0x7f0000000680), &(0x7f00000006c0), &(0x7f00000002c0)) seccomp(0x0, 0x0, &(0x7f0000000100)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000600)) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) seccomp(0x0, 0x0, &(0x7f0000000200)={0x0, &(0x7f00000001c0)}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000003c0)) getpgrp(0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000004c0)) seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x58fe4}]}) syz_execute_func(&(0x7f00000000c0)="428055a0be6969ef69dc00d9ce41fb0f1837370f38211ac4c19086d9f28fc9410feefa4e2179fbe5e54175450f2e1ac4010d64ac1e5d31a3b767e2989f7f") 20:49:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x1000000000000a, 0x80000000005, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gre0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x3}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0xf0fffffffffffe}, [@NDA_LLADDR={0xa, 0x2, @local}]}, 0x28}}, 0x0) [ 117.290855] IPVS: ftp: loaded support on port[0] = 21 [ 117.352016] IPVS: ftp: loaded support on port[0] = 21 [ 117.404481] IPVS: ftp: loaded support on port[0] = 21 [ 117.407439] IPVS: ftp: loaded support on port[0] = 21 [ 117.421849] IPVS: ftp: loaded support on port[0] = 21 [ 117.461318] IPVS: ftp: loaded support on port[0] = 21 [ 119.296372] ip (4445) used greatest stack depth: 53752 bytes left [ 120.635220] ip (4521) used greatest stack depth: 53496 bytes left [ 120.967466] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.974003] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.007602] device bridge_slave_0 entered promiscuous mode [ 121.154576] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.161084] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.191806] device bridge_slave_0 entered promiscuous mode [ 121.220941] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.228442] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.255952] device bridge_slave_1 entered promiscuous mode [ 121.283420] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.289953] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.305324] device bridge_slave_0 entered promiscuous mode [ 121.329620] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.336086] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.367069] device bridge_slave_0 entered promiscuous mode [ 121.387796] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.394258] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.408413] device bridge_slave_0 entered promiscuous mode [ 121.417451] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.423954] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.445221] device bridge_slave_0 entered promiscuous mode [ 121.469923] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.476382] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.491601] device bridge_slave_1 entered promiscuous mode [ 121.500225] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 121.508291] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.514811] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.539940] device bridge_slave_1 entered promiscuous mode [ 121.579495] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.585984] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.612125] device bridge_slave_1 entered promiscuous mode [ 121.630433] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.636956] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.673311] device bridge_slave_1 entered promiscuous mode [ 121.699672] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 121.708411] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.714963] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.744104] device bridge_slave_1 entered promiscuous mode [ 121.764246] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 121.772960] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 121.828042] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 121.902818] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 121.937599] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 121.972166] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 121.979989] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 122.056927] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 122.093581] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 122.212133] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 122.428021] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 122.545569] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 122.643438] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 122.690411] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 122.767185] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 122.788378] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 122.829071] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 122.934761] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 122.946615] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 122.978634] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 123.032017] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 123.039071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 123.072836] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 123.107578] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 123.114593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 123.167380] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 123.174454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 123.217489] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 123.233452] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 123.240418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 123.268628] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 123.278959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 123.308040] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 123.315056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 123.413094] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 123.420003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 123.459862] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 123.467007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 123.484786] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 123.514772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 123.562020] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 123.568996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 123.709825] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 123.716832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 123.756466] ip (4676) used greatest stack depth: 53240 bytes left [ 123.906328] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 123.927847] team0: Port device team_slave_0 added [ 124.009597] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 124.046129] team0: Port device team_slave_0 added [ 124.085616] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 124.113451] team0: Port device team_slave_0 added [ 124.138126] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 124.159817] team0: Port device team_slave_1 added [ 124.218201] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 124.234316] team0: Port device team_slave_0 added [ 124.253036] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 124.274672] team0: Port device team_slave_0 added [ 124.293582] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 124.314036] team0: Port device team_slave_1 added [ 124.341067] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 124.353301] team0: Port device team_slave_1 added [ 124.367573] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 124.397144] team0: Port device team_slave_0 added [ 124.415684] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 124.431114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 124.459209] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 124.495442] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 124.512804] team0: Port device team_slave_1 added [ 124.526917] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 124.542409] team0: Port device team_slave_1 added [ 124.580065] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 124.589090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 124.600706] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 124.623210] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 124.638836] team0: Port device team_slave_1 added [ 124.658404] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 124.669633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 124.696677] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 124.718949] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 124.729075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 124.746092] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 124.771367] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 124.778704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 124.806141] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 124.836262] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 124.843766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 124.859410] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 124.881802] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 124.889104] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 124.900519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 124.929297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 124.964295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 124.995720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.030417] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 125.069022] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 125.077674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 125.089844] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 125.117014] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 125.124991] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 125.135028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 125.165440] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 125.182645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 125.198926] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 125.223459] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 125.233256] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 125.245459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.269576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.278717] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.294762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 125.320411] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 125.327360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 125.348200] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 125.364320] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 125.384227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.406507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.423172] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 125.430616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.440302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.457458] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 125.481696] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 125.489286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.514771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.533118] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.551082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.583390] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 125.598439] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 125.606823] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.633229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 125.657146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.669675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 125.697557] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 125.713850] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 125.721618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.737616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 125.774607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.794330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 125.814713] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 125.826920] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.840223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 127.713225] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.719771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.726677] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.733119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.748547] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 127.757235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 128.146373] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.152857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.159759] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.166220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.199560] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 128.219520] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.225957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.232779] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.239228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.265463] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 128.279290] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.285785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.292671] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.299105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.311345] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 128.318430] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.324910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.331701] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.338141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.350132] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 128.357278] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.363759] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.370570] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.377016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.413486] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 128.789731] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 128.801720] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 128.833706] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 128.856234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 128.882114] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 137.252533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.525846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.621834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.779207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.826561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.874445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.092704] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 138.413039] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 138.486287] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 138.678183] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 138.788967] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 138.807698] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 138.903573] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 138.909812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 138.922047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 139.262381] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 139.268723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 139.277148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 139.355971] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 139.362277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 139.374692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 139.645979] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 139.652765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 139.668782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 139.709024] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 139.718110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 139.735593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 139.761393] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 139.770633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 139.789258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 139.954690] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.260412] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.275169] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.543466] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.674666] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.696096] 8021q: adding VLAN 0 to HW filter on device team0 20:50:15 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000280)={0x7}, 0xff7f) syncfs(r2) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2}) 20:50:15 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000080)) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000180)={0x0, {{0x2, 0x0, @local}}}, 0x88) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000058c0)={&(0x7f0000000000), 0xc, &(0x7f0000005880)={&(0x7f0000005580)={0x14}, 0x14}}, 0x0) [ 145.919662] device ip6gre0 entered promiscuous mode 20:50:16 executing program 0: clone(0x0, &(0x7f0000000180), &(0x7f0000000240), &(0x7f0000000100), &(0x7f0000000280)) 20:50:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x1000000000000a, 0x80000000005, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gre0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x3}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0xf0fffffffffffe}, [@NDA_LLADDR={0xa, 0x2, @local}]}, 0x28}}, 0x0) [ 146.254709] ================================================================== [ 146.262240] BUG: KMSAN: uninit-value in memcmp+0x11d/0x180 [ 146.267940] CPU: 0 PID: 5928 Comm: syz-executor1 Not tainted 4.19.0-rc3+ #44 [ 146.275153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 146.284540] Call Trace: [ 146.287173] dump_stack+0x14b/0x190 [ 146.290882] kmsan_report+0x183/0x2b0 [ 146.294707] __msan_warning+0x70/0xc0 [ 146.298564] memcmp+0x11d/0x180 [ 146.301891] dev_uc_add_excl+0x165/0x7b0 [ 146.306043] rtnl_fdb_add+0x1081/0x1270 [ 146.310062] ? rtnl_dump_all+0x540/0x540 [ 146.314132] rtnetlink_rcv_msg+0xa0b/0x1530 [ 146.318525] ? ___sys_sendmsg+0xe70/0x1290 [ 146.322779] ? __alloc_skb+0x201/0x9e0 [ 146.326711] ? netlink_sendmsg+0xb49/0x1290 [ 146.331102] ? kmsan_set_origin_inline+0x6b/0x120 [ 146.335957] ? __msan_poison_alloca+0x173/0x1f0 [ 146.340635] ? kmsan_set_origin_inline+0x6b/0x120 [ 146.345540] ? kmsan_set_origin_inline+0x6b/0x120 [ 146.350461] ? kmsan_set_origin+0x93/0x150 [ 146.354725] netlink_rcv_skb+0x36e/0x5f0 [ 146.358836] ? rtnetlink_bind+0x120/0x120 [ 146.363008] rtnetlink_rcv+0x50/0x60 [ 146.366740] netlink_unicast+0x1638/0x1720 [ 146.371029] ? rtnetlink_net_exit+0x90/0x90 [ 146.375426] netlink_sendmsg+0x1205/0x1290 [ 146.379728] ___sys_sendmsg+0xe70/0x1290 [ 146.383824] ? netlink_getsockopt+0x11c0/0x11c0 [ 146.388537] ? __fget_light+0x53/0x700 [ 146.392468] ? __fdget+0x4e/0x60 [ 146.395859] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 146.401244] ? __fget_light+0x6a3/0x700 [ 146.405270] __se_sys_sendmsg+0x2a3/0x3d0 [ 146.409476] __x64_sys_sendmsg+0x4a/0x70 [ 146.413551] do_syscall_64+0xb8/0x100 [ 146.417374] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 146.422583] RIP: 0033:0x4572d9 [ 146.425791] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 146.444695] RSP: 002b:00007fcda6cbfc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 146.452412] RAX: ffffffffffffffda RBX: 00007fcda6cc06d4 RCX: 00000000004572d9 [ 146.459703] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 146.466975] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 146.474252] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 146.481525] R13: 00000000004d4eb0 R14: 00000000004c93f1 R15: 0000000000000000 [ 146.488807] [ 146.490433] Uninit was created at: [ 146.493983] kmsan_internal_poison_shadow+0xb8/0x1b0 [ 146.499089] kmsan_kmalloc+0x98/0x100 [ 146.502903] kmsan_slab_alloc+0x10/0x20 [ 146.506891] __kmalloc_node_track_caller+0x9e7/0x1160 [ 146.512090] __alloc_skb+0x2f5/0x9e0 [ 146.515828] netlink_sendmsg+0xb49/0x1290 [ 146.520021] ___sys_sendmsg+0xe70/0x1290 [ 146.524092] __se_sys_sendmsg+0x2a3/0x3d0 [ 146.528260] __x64_sys_sendmsg+0x4a/0x70 [ 146.532332] do_syscall_64+0xb8/0x100 [ 146.536142] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 146.541329] ================================================================== [ 146.548688] Disabling lock debugging due to kernel taint [ 146.554165] Kernel panic - not syncing: panic_on_warn set ... [ 146.554165] [ 146.561550] CPU: 0 PID: 5928 Comm: syz-executor1 Tainted: G B 4.19.0-rc3+ #44 [ 146.570120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 146.579469] Call Trace: [ 146.582085] dump_stack+0x14b/0x190 [ 146.585743] panic+0x35d/0x8cb [ 146.588984] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 146.594499] kmsan_report+0x2a8/0x2b0 [ 146.598343] __msan_warning+0x70/0xc0 [ 146.602158] memcmp+0x11d/0x180 [ 146.605455] dev_uc_add_excl+0x165/0x7b0 [ 146.609553] rtnl_fdb_add+0x1081/0x1270 [ 146.613574] ? rtnl_dump_all+0x540/0x540 [ 146.617655] rtnetlink_rcv_msg+0xa0b/0x1530 [ 146.622044] ? ___sys_sendmsg+0xe70/0x1290 [ 146.626297] ? __alloc_skb+0x201/0x9e0 [ 146.630190] ? netlink_sendmsg+0xb49/0x1290 [ 146.634535] ? kmsan_set_origin_inline+0x6b/0x120 [ 146.639387] ? __msan_poison_alloca+0x173/0x1f0 [ 146.644058] ? kmsan_set_origin_inline+0x6b/0x120 [ 146.648949] ? kmsan_set_origin_inline+0x6b/0x120 [ 146.653806] ? kmsan_set_origin+0x93/0x150 [ 146.658066] netlink_rcv_skb+0x36e/0x5f0 [ 146.662170] ? rtnetlink_bind+0x120/0x120 [ 146.666363] rtnetlink_rcv+0x50/0x60 [ 146.670273] netlink_unicast+0x1638/0x1720 [ 146.674539] ? rtnetlink_net_exit+0x90/0x90 [ 146.678892] netlink_sendmsg+0x1205/0x1290 [ 146.683171] ___sys_sendmsg+0xe70/0x1290 [ 146.687265] ? netlink_getsockopt+0x11c0/0x11c0 [ 146.691970] ? __fget_light+0x53/0x700 [ 146.695894] ? __fdget+0x4e/0x60 [ 146.699293] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 146.704666] ? __fget_light+0x6a3/0x700 [ 146.708675] __se_sys_sendmsg+0x2a3/0x3d0 [ 146.712863] __x64_sys_sendmsg+0x4a/0x70 [ 146.716942] do_syscall_64+0xb8/0x100 [ 146.720783] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 146.725986] RIP: 0033:0x4572d9 [ 146.729187] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 146.748111] RSP: 002b:00007fcda6cbfc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 146.755833] RAX: ffffffffffffffda RBX: 00007fcda6cc06d4 RCX: 00000000004572d9 [ 146.763116] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 146.770409] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 146.777971] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 146.785255] R13: 00000000004d4eb0 R14: 00000000004c93f1 R15: 0000000000000000 [ 146.792855] Kernel Offset: disabled [ 146.796498] Rebooting in 86400 seconds..