[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 31.175975] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 34.829655] random: sshd: uninitialized urandom read (32 bytes read) [ 35.213872] random: sshd: uninitialized urandom read (32 bytes read) [ 36.461848] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.34' (ECDSA) to the list of known hosts. [ 41.962341] random: sshd: uninitialized urandom read (32 bytes read) 2018/05/25 04:32:27 fuzzer started 2018/05/25 04:32:27 dialing manager at 10.128.0.26:46257 [ 66.205851] can: request_module (can-proto-0) failed. [ 66.216873] can: request_module (can-proto-0) failed. 2018/05/25 04:32:53 kcov=true, comps=false 2018/05/25 04:32:59 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)={0x14, 0x1e, 0x201}, 0x14}, 0x1}, 0x0) 2018/05/25 04:32:59 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept(r0, &(0x7f00000001c0)=@ax25, &(0x7f0000000040)=0x80) sendmsg$kcm(r2, &(0x7f0000001b40)={&(0x7f0000000240)=@ethernet={0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x80, &(0x7f0000001640), 0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="d800000000000000ff010000050000000e0e8ea9345d851774bb1e9c286e9b015902eacd7a6648d4fb3b8c041e92e5fd9a476a31bda3e98b8b4c2720f6c6c0d3f6361081234e3badeb86c21085d58e102029ff3cda2fe85c2172aca3f3bbe3639372c70883c322807f895aab05b58ecf7e0e46e463e39dc6a4f54db97d20ea4b435f686a4b1bb97a53c99e1626cf6c9b2be603951f42d774556a1b948b367b356a3c9525b72bf316ba1f4419b60f82667ef2d78f4f2104bc9dc5f943d9bbfd872b8d6eced390a744aef356dd1cfa24d620569fb3e82262c490556aab1228204109ca670000100000"], 0xe8}, 0x0) 2018/05/25 04:32:59 executing program 7: socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @rand_addr=0x80000000, {[@timestamp={0x44, 0x4}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f00000002c0)) 2018/05/25 04:32:59 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000000300), 0xfd90, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) sendto$inet6(r0, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)={0xa}, 0x1c) 2018/05/25 04:32:59 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000000c0), 0x4) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="020a00000200000000466425ed51e59639dc08000040000000be7dc534bfa7d1e8cb65b4d4b93ac71608bf46fd08380f2efe18f732dcd6ef844657717263df1f3d5e08cec4cdf5b67aecc45718f7f8a4d075a0994011cd74b8d5b6552bb4ac2e6d9252a1a74c07e5d97e35f64eca8fe07d451fda33efa95946422c881ea439754bb3f6f9a782a721b5a75b7e6b5487bf855f2bc79762401662ab74ff244858d5dd736bd3ae349e4b07c7056e530f04107e3b602824c83f459f1cf4d861d03c35fec91da6cc53fe41cd39a694efdf29805fbf40dfdffcb5f99cb0d01ca2e7b63c50e2b4992f403a927be64925ee300dd3416059a94bed9b67f6214224dbeed65ff927f64eb9653529efc136c987a5d3ff094cdb6fadc86e669997f4c36b6e962473d14d0d373f2e5c0d41a6d216b7059f241b58adfb4aa16ad0530118f896bc22d6f8b95bf8ca484fd469be513ae94176e456ed4b7c900d516a4433c2badbe0511862421e86347fb4f3cd492b91361f62d8f1a77d387d31332cde91a75541cc2cbc8905f72696877da588c2e3e0ab7b47c6db86267980089a0354fb352425e22e80572f0100f02d985014a3776945706055c5d07ba0b98d136067c4f38cbfda481176aa37f1f811033a78deb9ac924ade93f000dfba713c7f6a2cec83cd857a36080807a60662ffc2c27e7342b2df5700"], 0x1f0}, 0x1}, 0x0) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 2018/05/25 04:32:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000356000)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000740)="15", 0x1, 0x200408d6, &(0x7f00000011c0)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x1c) 2018/05/25 04:32:59 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000800)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c00000014000108000000000000000000000000000000000000000000000000ff01000000000000000000010000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c0008000005000000000000"], 0x3}, 0x1}, 0x0) 2018/05/25 04:32:59 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000080)) [ 75.552897] IPVS: ftp: loaded support on port[0] = 21 [ 75.630872] IPVS: ftp: loaded support on port[0] = 21 [ 75.643373] IPVS: ftp: loaded support on port[0] = 21 [ 75.656186] IPVS: ftp: loaded support on port[0] = 21 [ 75.714660] IPVS: ftp: loaded support on port[0] = 21 [ 75.730626] IPVS: ftp: loaded support on port[0] = 21 [ 75.738209] IPVS: ftp: loaded support on port[0] = 21 [ 75.756707] IPVS: ftp: loaded support on port[0] = 21 [ 77.306441] ip (4703) used greatest stack depth: 54344 bytes left [ 77.609692] ip (4722) used greatest stack depth: 54040 bytes left [ 78.705737] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.712293] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.753235] device bridge_slave_0 entered promiscuous mode [ 78.790486] ip (4818) used greatest stack depth: 53768 bytes left [ 78.924308] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.930804] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.963185] device bridge_slave_1 entered promiscuous mode [ 79.039338] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.045845] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.089200] device bridge_slave_0 entered promiscuous mode [ 79.158814] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 79.173438] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.179930] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.218154] device bridge_slave_0 entered promiscuous mode [ 79.248329] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.254823] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.272188] device bridge_slave_0 entered promiscuous mode [ 79.297146] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.303635] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.316657] device bridge_slave_0 entered promiscuous mode [ 79.333328] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.339889] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.348018] device bridge_slave_0 entered promiscuous mode [ 79.359869] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.366322] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.379923] device bridge_slave_0 entered promiscuous mode [ 79.391573] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.398117] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.424619] device bridge_slave_1 entered promiscuous mode [ 79.440883] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.447408] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.457862] device bridge_slave_1 entered promiscuous mode [ 79.466389] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 79.482017] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.488576] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.497402] device bridge_slave_0 entered promiscuous mode [ 79.516903] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.523378] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.546138] device bridge_slave_1 entered promiscuous mode [ 79.561275] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.567806] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.601815] device bridge_slave_1 entered promiscuous mode [ 79.615765] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.622288] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.636964] device bridge_slave_1 entered promiscuous mode [ 79.645964] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.652518] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.669667] device bridge_slave_1 entered promiscuous mode [ 79.697901] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 79.709078] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 79.721951] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 79.729651] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.736554] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.780645] device bridge_slave_1 entered promiscuous mode [ 79.808685] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 79.817131] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 79.889764] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 79.911860] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 79.923714] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 79.942717] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 79.980690] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 80.002264] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 80.052315] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 80.076304] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 80.140928] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 80.203414] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 80.260144] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 80.449369] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 80.457080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.493920] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 80.609179] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 80.624624] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 80.689569] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 80.730533] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 80.742775] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 80.785810] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 80.837093] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 80.850515] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 80.902793] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 80.935438] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 80.946343] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 80.956640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.982245] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 81.007548] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 81.060137] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 81.105203] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 81.112217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.145963] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 81.153167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.166131] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 81.173938] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 81.181375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.218813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.249850] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 81.264138] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 81.280717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.299915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.338694] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 81.358225] team0: Port device team_slave_0 added [ 81.365159] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 81.383587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.410513] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 81.419188] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 81.428495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.457940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.492903] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 81.501476] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 81.508515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.517535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.539276] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 81.568440] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 81.595711] team0: Port device team_slave_1 added [ 81.623868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.645416] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 81.652702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.853188] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 81.862833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.886339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.974295] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 82.008245] team0: Port device team_slave_0 added [ 82.055688] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 82.076325] team0: Port device team_slave_0 added [ 82.095799] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 82.110494] team0: Port device team_slave_0 added [ 82.132610] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 82.150903] team0: Port device team_slave_0 added [ 82.173566] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 82.182437] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 82.194925] team0: Port device team_slave_0 added [ 82.237950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.252943] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.276987] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 82.289097] team0: Port device team_slave_1 added [ 82.305284] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 82.314869] team0: Port device team_slave_1 added [ 82.322750] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 82.341858] team0: Port device team_slave_0 added [ 82.351114] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 82.361240] team0: Port device team_slave_0 added [ 82.372176] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 82.384837] team0: Port device team_slave_1 added [ 82.401332] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 82.413088] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.436652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.459966] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 82.469234] team0: Port device team_slave_1 added [ 82.484337] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 82.501908] team0: Port device team_slave_1 added [ 82.513658] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 82.522509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.543518] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.578976] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 82.586093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.600973] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.619711] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 82.632659] team0: Port device team_slave_1 added [ 82.647460] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 82.661955] team0: Port device team_slave_1 added [ 82.684991] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 82.695757] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.711967] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.734155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.752368] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 82.761301] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 82.775397] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 82.782781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.810474] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.836926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.871908] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.887998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.896314] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.911091] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 82.928602] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 82.935592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.947080] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.956262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.965387] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.974431] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 82.983764] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 82.998682] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 83.005746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.014960] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.048632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.083906] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.100760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.121247] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.129637] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 83.137691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.145923] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.172554] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 83.180710] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 83.188562] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.207446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.223789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.242333] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.263738] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 83.276419] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 83.292310] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 83.302969] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 83.314319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.336662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.365645] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.389200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.408948] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.423434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.435666] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.443744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.453654] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 83.461814] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 83.469698] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 83.494285] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 83.502577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.519656] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.539946] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.557177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.576721] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.591894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.600154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.608299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.623223] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 83.632625] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 83.651263] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 83.663535] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 83.670946] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.691578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.717388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.757499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.784968] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.804234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.812675] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.821114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.829680] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 83.837276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.846225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.906366] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 83.917858] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.962784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.461117] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.467628] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.474487] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.480938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.521200] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 85.529725] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.848067] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.854570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.861380] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.867815] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.912685] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 85.932496] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.939014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.945883] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.952335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.960541] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 85.976891] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.983352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.990166] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.996576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.050219] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 86.063388] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.069981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.076815] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.083255] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.112330] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 86.119719] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.126185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.133009] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.139504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.148015] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 86.335220] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.341912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.348733] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.355163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.368480] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 86.422587] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.429102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.435899] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.442356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.515936] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 86.559532] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.575519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.592906] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.612868] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.626810] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.642579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.649999] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 94.100093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.251390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.402393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.665809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.778273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.813823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.907522] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 95.020604] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 95.091504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.140976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.212605] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 95.463922] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 95.610766] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 95.654885] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 95.745959] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 95.752420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 95.764280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.804660] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 95.812441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 95.835818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.885337] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 96.058673] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 96.078683] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 96.085136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.096071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.358381] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 96.364763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.373450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.468739] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 96.475395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.490937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.542946] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 96.549853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.572325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.613463] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.649832] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.701867] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 96.721591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.740323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.844757] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 96.851306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.865993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.948735] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.276314] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.343077] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.401460] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.532475] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.668612] 8021q: adding VLAN 0 to HW filter on device team0 2018/05/25 04:33:27 executing program 0: syz_emit_ethernet(0x36, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @rand_addr=0x80000000}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f00000002c0)) 2018/05/25 04:33:27 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000500)=0x9, 0x4) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/25 04:33:27 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x5}, 0x1c) sendto$inet6(r0, &(0x7f0000000300), 0xfd90, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) sendto$inet6(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/05/25 04:33:27 executing program 6: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000000c0)=[0xfffffffffffffff9]) 2018/05/25 04:33:27 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}, 0x1c) 2018/05/25 04:33:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000005c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000022000101000000000000000000000000961e6e814201783cf64aea723221760a83bbb0da1d4921bdfb2a15ff0eaec31b0f561b0487b36a87d6758f661abf250baf877621c2dc248fee9e4aeda13ef4119a18626855ff6c526c7969f0632966581f211637ae3ef184e5fe2e4880c16ac76a47853b942dd7326340545c247ad02cef828639aff99a3f5430591c39d2"], 0x1}, 0x1}, 0x0) 2018/05/25 04:33:27 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = accept(r0, &(0x7f0000000280)=@vsock={0x0, 0x0, 0x0, @my}, &(0x7f0000000300)=0x80) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000140)="a3", 0x1, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) sendmsg$nl_generic(r1, &(0x7f0000002180)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000002140)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x8080) close(r2) 2018/05/25 04:33:27 executing program 7: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/exec\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000380)=""/242, 0xf2}], 0x1, 0x0) 2018/05/25 04:33:27 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() r2 = fcntl$dupfd(r0, 0x0, r0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000100)=[{{&(0x7f0000000180)=@pppoe={0x0, 0x0, {0x0, @local}}, 0x4, &(0x7f0000000040), 0x0, &(0x7f0000001140)=""/161, 0xa1}}], 0x4000183, 0x0, &(0x7f0000001300)={0x0, r3+30000000}) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) sendmsg$nl_netfilter(r2, &(0x7f00000003c0)={&(0x7f0000000340)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000002340)={0x14}, 0x14}, 0x1}, 0x0) r4 = socket(0xa, 0x1, 0x0) ioctl(r4, 0x8912, &(0x7f0000000000)="4626262c8523bf012cf66f") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)) tkill(r1, 0x1004000000016) [ 102.439505] ================================================================== [ 102.447058] BUG: KMSAN: uninit-value in gre_rcv+0x1237/0x1970 [ 102.452954] CPU: 0 PID: 6649 Comm: syz-executor3 Not tainted 4.17.0-rc5+ #102 [ 102.460234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 102.469596] Call Trace: [ 102.472179] [ 102.474332] dump_stack+0x185/0x1d0 [ 102.477962] ? gre_rcv+0x1237/0x1970 [ 102.481682] kmsan_report+0x149/0x260 [ 102.485491] __msan_warning_32+0x6e/0xc0 2018/05/25 04:33:27 executing program 6: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x3, 0x3f, 0x1, 0x1ff, 0x0, 0x30, 0x24002, 0x4, 0xfffffffffffffffb, 0x1f, 0x0, 0x7, 0x7, 0x8, 0x481, 0x7, 0x5, 0x400, 0x10001, 0x8000, 0x80000001, 0x7ff, 0x2, 0x1, 0xb14, 0x3, 0x8000, 0x2, 0xbc, 0x7d09, 0x3, 0x8, 0x9, 0x6, 0xe0, 0x1, 0x0, 0x9, 0x7, @perf_config_ext={0x8000, 0x7}, 0x10, 0x80, 0x100000001, 0x3, 0x8, 0x1f, 0xe335}, 0x0, 0xc, 0xffffffffffffff9c, 0x1) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0xfffffffffffffffb) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000340)) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000000380)) r1 = socket$kcm(0xa, 0x2, 0x11) sendmsg$kcm(r1, &(0x7f0000000400)={&(0x7f0000000080)=@generic={0xa, "ffd11b01521dfe80000000000000fa1037a80e2946590f000000a6c593e6ef3d35a6b12233521f1f636c82483ced9b15aa88e89d87d0a87acb148d0b77a3d7bb288947cfc623e0afad275f4d5c79a6de39a113a85c44221a41d88b7d6c6b3af53503d46853b4e13a897e4d7c008782ee6d03488cea4dd54a9ee79ddc2994"}, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000440)}, 0x7ffffff7) [ 102.489557] gre_rcv+0x1237/0x1970 [ 102.493098] ? raw_local_deliver+0x63/0x1660 [ 102.497598] ? kmsan_set_origin_inline+0x6b/0x120 [ 102.502453] ? erspan_xmit+0x2d70/0x2d70 [ 102.506522] gre_rcv+0x2d6/0x3b0 [ 102.509895] ? gre_parse_header+0x14e0/0x14e0 [ 102.514402] ip_local_deliver_finish+0x881/0xed0 [ 102.519168] ip_local_deliver+0x43c/0x4e0 [ 102.523322] ? ip_local_deliver+0x4e0/0x4e0 [ 102.527654] ? ip_call_ra_chain+0x7c0/0x7c0 [ 102.531988] ip_rcv_finish+0xa36/0x1d00 2018/05/25 04:33:27 executing program 7: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={&(0x7f0000018ff4)={0x10}, 0xc, &(0x7f0000013ff1)={&(0x7f0000000180)={0x1c, 0x28, 0x1, 0x0, 0x0, {0x1}, [@generic="7b6c6e6603"]}, 0x1c}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000080)={{{@in=@multicast2, @in=@remote}}, {{@in=@rand_addr}, 0x0, @in=@multicast1}}, &(0x7f00000001c0)=0xe8) [ 102.535966] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 102.541336] ip_rcv+0x118a/0x16d0 [ 102.544800] ? ip_rcv+0x16d0/0x16d0 [ 102.548437] ? ip_local_deliver_finish+0xed0/0xed0 [ 102.553387] __netif_receive_skb_core+0x47ff/0x4ac0 [ 102.558426] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 102.563805] ? kmsan_set_origin_inline+0x20/0x120 [ 102.568667] process_backlog+0x62d/0xe20 [ 102.572747] ? rps_trigger_softirq+0x2f0/0x2f0 [ 102.577349] net_rx_action+0x7c1/0x1a70 [ 102.581336] ? net_tx_action+0xab0/0xab0 [ 102.585405] __do_softirq+0x56d/0x93d 2018/05/25 04:33:27 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={&(0x7f0000000280), &(0x7f0000000180)}}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x1, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500), 0x10000000000001a3) write(r1, &(0x7f0000c34fff), 0xffffff0b) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000016) [ 102.589215] do_softirq_own_stack+0x2a/0x40 [ 102.593530] [ 102.595777] __local_bh_enable_ip+0x114/0x140 [ 102.600271] local_bh_enable+0x36/0x40 [ 102.604160] ip_finish_output2+0x1378/0x1490 [ 102.608580] ip_do_fragment+0x36b9/0x3ef0 [ 102.612748] ? ip_fragment+0x3f0/0x3f0 [ 102.616655] ip_fragment+0x249/0x3f0 [ 102.620471] ip_finish_output+0xd18/0xff0 [ 102.624632] ip_output+0x505/0x5d0 [ 102.628183] ? ip_mc_finish_output+0x3b0/0x3b0 [ 102.632789] ? ip_finish_output+0xff0/0xff0 [ 102.637121] ip_send_skb+0x173/0x350 [ 102.640854] udp_send_skb+0xeb6/0x1310 [ 102.644758] udp_sendmsg+0x9f9/0x33d0 [ 102.648573] ? rcu_all_qs+0x32/0x1f0 [ 102.652298] ? _cond_resched+0x3c/0xd0 [ 102.656192] ? ip_copy_metadata+0xee0/0xee0 [ 102.660524] ? rcu_all_qs+0x32/0x1f0 [ 102.664248] udpv6_sendmsg+0x1291/0x3f40 [ 102.668320] ? do_futex+0x284a/0x6ad0 [ 102.672125] ? kmsan_set_origin_inline+0x6b/0x120 [ 102.676965] ? __fdget+0x4e/0x60 [ 102.680336] ? udpv6_queue_rcv_skb+0x1c60/0x1c60 [ 102.685092] inet_sendmsg+0x3f7/0x750 [ 102.688895] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 102.694260] ? inet_getname+0x4a0/0x4a0 [ 102.698236] __sys_sendto+0x6c0/0x7e0 [ 102.702040] ? prepare_exit_to_usermode+0x4a/0x3a0 [ 102.706970] ? syscall_return_slowpath+0xe9/0x700 [ 102.711826] __x64_sys_sendto+0x1a1/0x210 [ 102.715981] do_syscall_64+0x152/0x230 [ 102.719874] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 102.725076] RIP: 0033:0x455a09 [ 102.728266] RSP: 002b:00007f2a729c7c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 102.735981] RAX: ffffffffffffffda RBX: 00007f2a729c86d4 RCX: 0000000000455a09 [ 102.743263] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000013 [ 102.750577] RBP: 000000000072bea0 R08: 0000000020000180 R09: 000000000000001c [ 102.757864] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 102.765152] R13: 00000000000005ac R14: 00000000006fc8c0 R15: 0000000000000000 [ 102.772433] [ 102.774102] Uninit was stored to memory at: [ 102.778444] kmsan_internal_chain_origin+0x12b/0x210 [ 102.783565] kmsan_memcpy_origins+0x11d/0x170 [ 102.788072] __msan_memcpy+0x109/0x160 [ 102.791970] pskb_expand_head+0x3a6/0x1a70 [ 102.796209] ip_tunnel_xmit+0x2dd6/0x37b0 [ 102.800368] erspan_xmit+0x1c67/0x2d70 [ 102.804265] dev_hard_start_xmit+0x5f1/0xc70 [ 102.808683] sch_direct_xmit+0x578/0x8f0 [ 102.812756] __qdisc_run+0x1785/0x3730 [ 102.816682] __dev_queue_xmit+0x1d50/0x3510 [ 102.821014] dev_queue_xmit+0x4b/0x60 [ 102.824852] neigh_resolve_output+0xac6/0xb60 [ 102.829359] ip_finish_output2+0x1362/0x1490 [ 102.833788] ip_do_fragment+0x36b9/0x3ef0 [ 102.837943] ip_fragment+0x249/0x3f0 [ 102.841685] ip_finish_output+0xd18/0xff0 [ 102.845848] ip_output+0x505/0x5d0 [ 102.849487] ip_send_skb+0x173/0x350 [ 102.853213] udp_send_skb+0xeb6/0x1310 [ 102.857124] udp_sendmsg+0x9f9/0x33d0 [ 102.860937] udpv6_sendmsg+0x1291/0x3f40 [ 102.865016] inet_sendmsg+0x3f7/0x750 [ 102.868829] __sys_sendto+0x6c0/0x7e0 [ 102.872644] __x64_sys_sendto+0x1a1/0x210 [ 102.876800] do_syscall_64+0x152/0x230 [ 102.880694] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 102.885881] Uninit was created at: [ 102.889436] kmsan_internal_poison_shadow+0xb8/0x1b0 [ 102.894554] kmsan_kmalloc+0x94/0x100 [ 102.898456] kmsan_slab_alloc+0x10/0x20 [ 102.902442] __kmalloc_node_track_caller+0xb32/0x11b0 [ 102.907645] __alloc_skb+0x2cb/0x9e0 [ 102.911359] alloc_skb_with_frags+0x1e6/0xb80 [ 102.915854] sock_alloc_send_pskb+0xb56/0x1190 [ 102.920438] sock_alloc_send_skb+0xca/0xe0 [ 102.924669] __ip_append_data+0x28ec/0x3fb0 [ 102.928987] ip_append_data+0x2fb/0x440 [ 102.932961] udp_sendmsg+0x70f/0x33d0 [ 102.936766] udpv6_sendmsg+0x1291/0x3f40 [ 102.940839] inet_sendmsg+0x3f7/0x750 [ 102.944657] __sys_sendto+0x6c0/0x7e0 [ 102.948576] __x64_sys_sendto+0x1a1/0x210 [ 102.953003] do_syscall_64+0x152/0x230 [ 102.956906] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 102.962092] ================================================================== [ 102.969454] Disabling lock debugging due to kernel taint [ 102.974914] Kernel panic - not syncing: panic_on_warn set ... [ 102.974914] [ 102.982301] CPU: 0 PID: 6649 Comm: syz-executor3 Tainted: G B 4.17.0-rc5+ #102 [ 102.991264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 103.000974] Call Trace: [ 103.003557] [ 103.005714] dump_stack+0x185/0x1d0 [ 103.009346] panic+0x39d/0x940 [ 103.012558] ? gre_rcv+0x1237/0x1970 [ 103.016273] kmsan_report+0x260/0x260 [ 103.020075] __msan_warning_32+0x6e/0xc0 [ 103.024141] gre_rcv+0x1237/0x1970 [ 103.027686] ? raw_local_deliver+0x63/0x1660 [ 103.032103] ? kmsan_set_origin_inline+0x6b/0x120 [ 103.036954] ? erspan_xmit+0x2d70/0x2d70 [ 103.041024] gre_rcv+0x2d6/0x3b0 [ 103.044398] ? gre_parse_header+0x14e0/0x14e0 [ 103.048901] ip_local_deliver_finish+0x881/0xed0 [ 103.053670] ip_local_deliver+0x43c/0x4e0 [ 103.057827] ? ip_local_deliver+0x4e0/0x4e0 [ 103.062154] ? ip_call_ra_chain+0x7c0/0x7c0 [ 103.066486] ip_rcv_finish+0xa36/0x1d00 [ 103.070464] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 103.075828] ip_rcv+0x118a/0x16d0 [ 103.079281] ? ip_rcv+0x16d0/0x16d0 [ 103.082914] ? ip_local_deliver_finish+0xed0/0xed0 [ 103.087853] __netif_receive_skb_core+0x47ff/0x4ac0 [ 103.092872] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 103.098238] ? kmsan_set_origin_inline+0x20/0x120 [ 103.103087] process_backlog+0x62d/0xe20 [ 103.107157] ? rps_trigger_softirq+0x2f0/0x2f0 [ 103.111842] net_rx_action+0x7c1/0x1a70 [ 103.115828] ? net_tx_action+0xab0/0xab0 [ 103.119894] __do_softirq+0x56d/0x93d [ 103.123704] do_softirq_own_stack+0x2a/0x40 [ 103.128020] [ 103.130264] __local_bh_enable_ip+0x114/0x140 [ 103.134769] local_bh_enable+0x36/0x40 [ 103.138657] ip_finish_output2+0x1378/0x1490 [ 103.144983] ip_do_fragment+0x36b9/0x3ef0 [ 103.149137] ? ip_fragment+0x3f0/0x3f0 [ 103.153041] ip_fragment+0x249/0x3f0 [ 103.156776] ip_finish_output+0xd18/0xff0 [ 103.160950] ip_output+0x505/0x5d0 [ 103.164510] ? ip_mc_finish_output+0x3b0/0x3b0 [ 103.169100] ? ip_finish_output+0xff0/0xff0 [ 103.173430] ip_send_skb+0x173/0x350 [ 103.177155] udp_send_skb+0xeb6/0x1310 [ 103.181057] udp_sendmsg+0x9f9/0x33d0 [ 103.184867] ? rcu_all_qs+0x32/0x1f0 [ 103.188591] ? _cond_resched+0x3c/0xd0 [ 103.192497] ? ip_copy_metadata+0xee0/0xee0 [ 103.196832] ? rcu_all_qs+0x32/0x1f0 [ 103.200572] udpv6_sendmsg+0x1291/0x3f40 [ 103.206277] ? do_futex+0x284a/0x6ad0 [ 103.210065] ? kmsan_set_origin_inline+0x6b/0x120 [ 103.214894] ? __fdget+0x4e/0x60 [ 103.218247] ? udpv6_queue_rcv_skb+0x1c60/0x1c60 [ 103.222987] inet_sendmsg+0x3f7/0x750 [ 103.226776] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 103.232127] ? inet_getname+0x4a0/0x4a0 [ 103.236088] __sys_sendto+0x6c0/0x7e0 [ 103.239875] ? prepare_exit_to_usermode+0x4a/0x3a0 [ 103.244788] ? syscall_return_slowpath+0xe9/0x700 [ 103.249622] __x64_sys_sendto+0x1a1/0x210 [ 103.253757] do_syscall_64+0x152/0x230 [ 103.257638] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 103.262820] RIP: 0033:0x455a09 [ 103.265996] RSP: 002b:00007f2a729c7c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 103.273693] RAX: ffffffffffffffda RBX: 00007f2a729c86d4 RCX: 0000000000455a09 [ 103.280948] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000013 [ 103.288202] RBP: 000000000072bea0 R08: 0000000020000180 R09: 000000000000001c [ 103.295473] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 103.302772] R13: 00000000000005ac R14: 00000000006fc8c0 R15: 0000000000000000 [ 103.310642] Dumping ftrace buffer: [ 103.314166] (ftrace buffer empty) [ 103.317852] Kernel Offset: disabled [ 103.321469] Rebooting in 86400 seconds..