[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 35.715035] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 40.430824] random: sshd: uninitialized urandom read (32 bytes read) [ 40.923354] random: sshd: uninitialized urandom read (32 bytes read) [ 42.076173] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.15.194' (ECDSA) to the list of known hosts. [ 47.805110] random: sshd: uninitialized urandom read (32 bytes read) 2018/09/10 20:57:19 fuzzer started [ 49.241858] random: cc1: uninitialized urandom read (8 bytes read) 2018/09/10 20:57:23 dialing manager at 10.128.0.26:43895 2018/09/10 20:57:23 syscalls: 1 2018/09/10 20:57:23 code coverage: enabled 2018/09/10 20:57:23 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/09/10 20:57:23 setuid sandbox: enabled 2018/09/10 20:57:23 namespace sandbox: enabled 2018/09/10 20:57:23 fault injection: enabled 2018/09/10 20:57:23 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/09/10 20:57:23 net packed injection: enabled 2018/09/10 20:57:23 net device setup: enabled [ 53.768330] random: crng init done 20:58:43 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100), 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$get_persistent(0x16, 0x0, r0) 20:58:43 executing program 1: lsetxattr$trusted_overlay_upper(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.upper\x00', &(0x7f00000001c0)={0x0, 0xfb, 0x15, 0x0, 0x0, "b5e51bcafdfd24c432c7a5b15ec61351"}, 0x15, 0x0) dup(0xffffffffffffff9c) accept4(0xffffffffffffffff, &(0x7f0000000040)=@generic, &(0x7f00000000c0)=0x80, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x58fe4}]}) syz_execute_func(&(0x7f0000000540)="428055a0376969ef69dc3641ffaa32233333c4c2958e0941a30f7f7f3766460f3828523044c19086d962788f35c935c97d197a0779fbc463fd7998b400ba000079aaff43d0e1460f0da11b000000010d64ac1e5d31a314b706e205987b7f") 20:58:43 executing program 5: pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x2) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000180), &(0x7f00000001c0)=0x8) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) chroot(&(0x7f0000000040)='./file0\x00') clock_adjtime(0x0, &(0x7f00000004c0)) seccomp(0x0, 0x0, &(0x7f0000000100)) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000680), &(0x7f0000000640)=0x13a) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000440)='team_slave_1\x00') setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f00000003c0)={{0x0, @dev, 0x0, 0x0, 'wrr\x00'}, {@rand_addr}}, 0x44) seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x58fe4}]}) syz_execute_func(&(0x7f00000006c0)="42805da0124fefeddc0f01eea873fe19fa380f38211af3f081768cc8000000c481b5e5bc2b0000002167f00fbab204000000ca6b2179dae5e54175450f2e1a8f0818ef0d0e0000000044dbe271fb0703") 20:58:43 executing program 3: memfd_create(&(0x7f0000000140)='\'\\+}ppp0\x00', 0x0) eventfd(0x0) seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x58fe4}]}) syz_execute_func(&(0x7f0000000540)="428055a0376969ef69dc3641ffaa32233333c4c2958e0941a30f7f7f3766460f3828523044c19086d962788f35c935c97d197a0779fbc463fd7998b400ba000079aaff43d0e1460f0da11b000000010d64ac1e5d31a314b706e205987b7f") 20:58:43 executing program 4: recvmsg(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000001880), 0x0, &(0x7f0000001900)=""/23, 0x17}, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000001980)={'NETMAP\x00'}, &(0x7f00000019c0)=0x1e) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) futex(&(0x7f0000000380), 0x5, 0x0, &(0x7f00000003c0)={0x77359400}, &(0x7f00000005c0), 0x0) openat(0xffffffffffffffff, &(0x7f00000018c0)='./file0\x00', 0x0, 0x0) seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x58fe4}]}) add_key$keyring(&(0x7f0000000700)='keyring\x00', &(0x7f0000000740), 0x0, 0x0, 0xfffffffffffffffa) add_key(&(0x7f0000000580)='user\x00', &(0x7f00000006c0), 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x6, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f0000000140)) syz_execute_func(&(0x7f0000000240)="428055a08e6969ef69dc00d990c841ff0f1837c4c3397c2a060f38211a40a5c19086d9f28fc9410feefae5e54175455d0f2e1a1a010d64ac1e5d31a3b786e2989f7f") 20:58:43 executing program 2: clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x80000000005, &(0x7f0000000080)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x0, 0x0) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000200)=0x40) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) [ 132.838820] IPVS: ftp: loaded support on port[0] = 21 [ 132.876179] IPVS: ftp: loaded support on port[0] = 21 [ 132.904250] IPVS: ftp: loaded support on port[0] = 21 [ 132.968011] IPVS: ftp: loaded support on port[0] = 21 [ 132.992116] IPVS: ftp: loaded support on port[0] = 21 [ 133.023890] IPVS: ftp: loaded support on port[0] = 21 [ 135.730143] ip (4472) used greatest stack depth: 53784 bytes left [ 136.058766] ip (4488) used greatest stack depth: 53752 bytes left [ 136.124068] ip (4491) used greatest stack depth: 53528 bytes left [ 136.625973] ip (4518) used greatest stack depth: 53496 bytes left [ 136.816786] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.824003] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.862118] device bridge_slave_0 entered promiscuous mode [ 137.081110] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.087942] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.116694] device bridge_slave_1 entered promiscuous mode [ 137.139572] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.146663] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.191708] device bridge_slave_0 entered promiscuous mode [ 137.348189] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 137.448399] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.455103] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.479236] device bridge_slave_0 entered promiscuous mode [ 137.499454] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.506044] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.540357] device bridge_slave_1 entered promiscuous mode [ 137.555395] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.562114] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.570990] device bridge_slave_0 entered promiscuous mode [ 137.586302] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.592829] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.617881] device bridge_slave_0 entered promiscuous mode [ 137.651841] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 137.661587] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.668097] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.681961] device bridge_slave_0 entered promiscuous mode [ 137.693382] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.700703] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.747816] device bridge_slave_1 entered promiscuous mode [ 137.772864] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 137.860767] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.867798] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.906748] device bridge_slave_1 entered promiscuous mode [ 137.937668] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.944264] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.973699] device bridge_slave_1 entered promiscuous mode [ 137.985685] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.992252] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.001085] device bridge_slave_1 entered promiscuous mode [ 138.023789] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 138.033940] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 138.090463] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 138.224778] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 138.234243] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 138.325100] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 138.386001] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 138.463861] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 138.512842] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 138.548771] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 138.790970] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 138.821447] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 139.053304] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 139.060806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 139.085057] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 139.105123] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 139.116095] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 139.200320] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 139.293648] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 139.305072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 139.334049] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 139.392191] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 139.408830] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 139.419850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 139.483470] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 139.495986] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 139.678653] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 139.733801] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 139.742488] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 139.754194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 139.768687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 139.795073] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 139.803594] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 139.811093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 139.870271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 139.928924] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 139.935965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 139.984991] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 139.992164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 140.056099] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 140.087984] team0: Port device team_slave_0 added [ 140.119159] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 140.126333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 140.168711] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 140.180048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 140.196676] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 140.204006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 140.350000] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 140.370822] team0: Port device team_slave_1 added [ 140.642066] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 140.649147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 140.662610] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 140.730742] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 140.748463] team0: Port device team_slave_0 added [ 140.829793] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 140.855478] team0: Port device team_slave_0 added [ 140.911079] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 140.918275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 140.935990] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 140.997393] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 141.020376] team0: Port device team_slave_0 added [ 141.029893] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 141.051189] team0: Port device team_slave_0 added [ 141.096424] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 141.117773] team0: Port device team_slave_1 added [ 141.136397] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 141.158916] team0: Port device team_slave_1 added [ 141.189022] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 141.215103] team0: Port device team_slave_0 added [ 141.261318] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 141.273040] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 141.292456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 141.350616] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 141.361097] team0: Port device team_slave_1 added [ 141.382712] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 141.405863] team0: Port device team_slave_1 added [ 141.412627] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 141.423320] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 141.454117] team0: Port device team_slave_1 added [ 141.476025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 141.499964] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 141.549507] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 141.558316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 141.580088] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 141.601619] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 141.612931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 141.635147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 141.669277] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 141.683107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 141.709842] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 141.741110] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 141.751813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 141.766256] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 141.805260] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 141.814194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 141.829891] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 141.870357] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 141.887563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 141.898922] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 141.928674] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 141.948381] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 141.960812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 141.992305] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 142.021872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 142.043551] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 142.099057] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 142.107640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 142.118468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 142.157025] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 142.171408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 142.183034] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 142.196922] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 142.209052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 142.240250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 142.270972] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 142.280846] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 142.304882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 142.342378] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 142.350862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 142.364961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 142.419044] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 142.427345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 142.445808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 142.480918] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 142.489243] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 142.503209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 142.524965] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 142.535908] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 142.548197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 142.584238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 142.600302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 142.631960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 142.655436] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 142.664727] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 142.697038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 142.756822] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 142.766658] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 142.776772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 142.857618] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 142.865784] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 142.885164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 144.953585] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.960113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.967280] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.973940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.024924] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 145.033960] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 145.318783] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.325422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.333090] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.339614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.382660] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 145.539075] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.546451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.553899] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.560605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.608470] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 145.673340] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.680074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.687222] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.694223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.748496] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 145.831525] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.838119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.845024] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.851619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.890688] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 145.909112] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.916665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.924006] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.930603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.961599] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 146.068923] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 146.080772] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 146.114084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 146.146257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 146.185687] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 150.355095] ip (5138) used greatest stack depth: 53464 bytes left [ 155.675626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.986778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.032354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.157320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.324232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.613569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.764340] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 156.944874] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 156.978581] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 157.213166] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 157.307917] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 157.609930] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 157.766714] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 157.773121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 157.783945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 157.891429] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 157.898132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 157.915888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 157.945310] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 157.951799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 157.966721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 158.178503] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 158.184998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 158.199949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 158.311694] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 158.318132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 158.335400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 158.486708] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 158.493160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 158.508286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 158.766000] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.812864] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.960105] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.170184] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.292368] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.361674] 8021q: adding VLAN 0 to HW filter on device team0 20:59:16 executing program 3: epoll_create(0x0) inotify_init() bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)={&(0x7f0000000180)='./file0\x00'}, 0x10) seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x58fe4}]}) syz_execute_func(&(0x7f0000000540)="428055a0376969ef69dc3641ffaa32233333c4c2958e0941a30f7f7f3766460f3828523044c19086d962788f35c935c97d197a0779fbc463fd7998b400ba000079aaff43d0e1460f0da11b000000010d64ac1e5d31a314b706e205987b7f") 20:59:17 executing program 5: memfd_create(&(0x7f0000000480)='/dev/rtc0\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000004c0)={{}, 0x0, 0x0, 'id1\x00', 'timer0\x00'}) setrlimit(0x0, &(0x7f0000000040)) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f00000002c0)) seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x58fe4}]}) pipe(&(0x7f0000000140)) fdatasync(0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)={@loopback, @broadcast}, &(0x7f0000000200)=0xc) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000600)={'nat\x00'}, &(0x7f0000000680)=0x78) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000003c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@mcast2, @in=@local}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) gettid() fstat(0xffffffffffffffff, &(0x7f0000000c00)) getgid() stat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000d40), &(0x7f0000000d80)=0xc) lstat(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00)) stat(&(0x7f0000000e80)='./file0\x00', &(0x7f0000000ec0)) stat(&(0x7f0000000f40)='./file0\x00', &(0x7f0000000f80)) lstat(&(0x7f0000001000)='./file0\x00', &(0x7f0000001040)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000010c0)={{{@in6=@mcast1}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f00000011c0)=0xe8) getegid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000780)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000009c0), 0x0, &(0x7f0000001200)}, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@mcast2, @local, @loopback}) syz_execute_func(&(0x7f0000000300)="428055a06b6969ef69dc00d99069203637c3397c2a060f38211a40a564a741dfe0400f01efe5e57d0f2e1a1a01460f36660fd3600931a3b786e2989f67430f18d3") ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000380)) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) capset(&(0x7f0000000700), &(0x7f0000000740)) 20:59:17 executing program 2: r0 = socket$packet(0x11, 0x40000000000002, 0x300) sendto$inet6(r0, &(0x7f0000000440), 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0xf, @mcast2}, 0x1c) [ 165.668505] ================================================================== [ 165.676339] BUG: KMSAN: uninit-value in bond_start_xmit+0x1ab8/0x2b90 [ 165.683247] CPU: 1 PID: 5922 Comm: syz-executor2 Not tainted 4.19.0-rc1+ #43 [ 165.691383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 165.701190] Call Trace: [ 165.704013] dump_stack+0x14b/0x190 [ 165.707686] kmsan_report+0x183/0x2b0 [ 165.711711] __msan_warning+0x70/0xc0 [ 165.715659] bond_start_xmit+0x1ab8/0x2b90 [ 165.720158] ? bond_close+0x1d0/0x1d0 [ 165.724006] dev_hard_start_xmit+0x5df/0xc20 [ 165.728636] __dev_queue_xmit+0x2f35/0x3ab0 [ 165.733481] dev_queue_xmit+0x4b/0x60 [ 165.737322] ? __netdev_pick_tx+0x12e0/0x12e0 [ 165.742073] packet_sendmsg+0x80ff/0x8c60 [ 165.746295] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 165.752042] ? kmsan_set_origin_inline+0x6b/0x120 [ 165.756948] ? __msan_poison_alloca+0x173/0x1f0 [ 165.761717] ? compat_packet_setsockopt+0x360/0x360 [ 165.766942] __sys_sendto+0x868/0xa30 [ 165.770994] ? prepare_exit_to_usermode+0x46/0x410 [ 165.775975] ? syscall_return_slowpath+0xdb/0x700 [ 165.781277] __se_sys_sendto+0x107/0x130 [ 165.786046] __x64_sys_sendto+0x6e/0x90 [ 165.790235] do_syscall_64+0xb8/0x100 [ 165.794366] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 165.799578] RIP: 0033:0x4572a9 [ 165.802897] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 165.822800] RSP: 002b:00007f2a06bccc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 165.830931] RAX: ffffffffffffffda RBX: 00007f2a06bcd6d4 RCX: 00000000004572a9 [ 165.840269] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000003 [ 165.847934] RBP: 00000000009300a0 R08: 0000000020000080 R09: 000000000000001c [ 165.855444] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 165.863400] R13: 00000000004d4f48 R14: 00000000004c942d R15: 0000000000000000 [ 165.871069] [ 165.872914] Uninit was created at: [ 165.876592] kmsan_internal_poison_shadow+0xb8/0x1b0 [ 165.882161] kmsan_kmalloc+0x98/0x100 [ 165.886407] kmsan_slab_alloc+0x10/0x20 [ 165.890420] __kmalloc_node_track_caller+0x9e7/0x1160 [ 165.895728] __alloc_skb+0x2f5/0x9e0 [ 165.899587] alloc_skb_with_frags+0x1d0/0xac0 [ 165.904133] sock_alloc_send_pskb+0xb47/0x1170 [ 165.909397] packet_sendmsg+0x6599/0x8c60 [ 165.913963] __sys_sendto+0x868/0xa30 [ 165.917801] __se_sys_sendto+0x107/0x130 [ 165.922041] __x64_sys_sendto+0x6e/0x90 [ 165.926288] do_syscall_64+0xb8/0x100 [ 165.930150] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 165.935548] ================================================================== [ 165.942949] Disabling lock debugging due to kernel taint [ 165.949081] Kernel panic - not syncing: panic_on_warn set ... [ 165.949081] [ 165.957649] CPU: 1 PID: 5922 Comm: syz-executor2 Tainted: G B 4.19.0-rc1+ #43 [ 165.966828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 165.977262] Call Trace: [ 165.979902] dump_stack+0x14b/0x190 [ 165.983749] panic+0x35d/0x8cb [ 165.987537] kmsan_report+0x2a8/0x2b0 [ 165.991916] __msan_warning+0x70/0xc0 [ 165.995871] bond_start_xmit+0x1ab8/0x2b90 [ 166.000349] ? bond_close+0x1d0/0x1d0 [ 166.004275] dev_hard_start_xmit+0x5df/0xc20 [ 166.009384] __dev_queue_xmit+0x2f35/0x3ab0 [ 166.013998] dev_queue_xmit+0x4b/0x60 [ 166.018111] ? __netdev_pick_tx+0x12e0/0x12e0 [ 166.022650] packet_sendmsg+0x80ff/0x8c60 [ 166.028045] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 166.033798] ? kmsan_set_origin_inline+0x6b/0x120 [ 166.038668] ? __msan_poison_alloca+0x173/0x1f0 [ 166.043521] ? compat_packet_setsockopt+0x360/0x360 [ 166.048945] __sys_sendto+0x868/0xa30 [ 166.053076] ? prepare_exit_to_usermode+0x46/0x410 [ 166.058034] ? syscall_return_slowpath+0xdb/0x700 [ 166.062973] __se_sys_sendto+0x107/0x130 [ 166.067300] __x64_sys_sendto+0x6e/0x90 [ 166.071408] do_syscall_64+0xb8/0x100 [ 166.075257] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 166.080882] RIP: 0033:0x4572a9 [ 166.084129] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 166.103536] RSP: 002b:00007f2a06bccc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 166.111466] RAX: ffffffffffffffda RBX: 00007f2a06bcd6d4 RCX: 00000000004572a9 [ 166.119153] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000003 [ 166.126618] RBP: 00000000009300a0 R08: 0000000020000080 R09: 000000000000001c [ 166.134415] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 166.142448] R13: 00000000004d4f48 R14: 00000000004c942d R15: 0000000000000000 [ 166.150476] Dumping ftrace buffer: [ 166.154185] (ftrace buffer empty) [ 166.157901] Kernel Offset: disabled [ 166.162032] Rebooting in 86400 seconds..