[[0;32m OK [0m] Started Getty on tty2.
[[0;32m OK [0m] Started Getty on tty1.
[[0;32m OK [0m] Started Serial Getty on ttyS0.
[[0;32m OK [0m] Started System Logging Service.
[[0;32m OK [0m] Started getty on tty2-tty6 if dbus and logind are not available.
Debian GNU/Linux 9 syzkaller ttyS0
Warning: Permanently added '10.128.0.102' (ECDSA) to the list of known hosts.
syzkaller login: [ 140.168722][ T8480] IPVS: ftp: loaded support on port[0] = 21
[ 140.340870][ T8480] chnl_net:caif_netlink_parms(): no params data found
[ 140.438266][ T8480] bridge0: port 1(bridge_slave_0) entered blocking state
[ 140.445549][ T8480] bridge0: port 1(bridge_slave_0) entered disabled state
[ 140.455827][ T8480] device bridge_slave_0 entered promiscuous mode
[ 140.467013][ T8480] bridge0: port 2(bridge_slave_1) entered blocking state
[ 140.474201][ T8480] bridge0: port 2(bridge_slave_1) entered disabled state
[ 140.484241][ T8480] device bridge_slave_1 entered promiscuous mode
[ 140.518218][ T8480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 140.531591][ T8480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 140.567518][ T8480] team0: Port device team_slave_0 added
[ 140.578260][ T8480] team0: Port device team_slave_1 added
[ 140.609123][ T8480] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 140.616123][ T8480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 140.642459][ T8480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 140.669870][ T8480] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 140.677193][ T8480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 140.704499][ T8480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 140.790578][ T8480] device hsr_slave_0 entered promiscuous mode
[ 140.801575][ T8480] device hsr_slave_1 entered promiscuous mode
[ 140.985069][ T8480] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 140.999282][ T8480] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 141.017916][ T8480] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 141.035553][ T8480] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 141.121272][ T8480] bridge0: port 2(bridge_slave_1) entered blocking state
[ 141.129079][ T8480] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 141.136997][ T8480] bridge0: port 1(bridge_slave_0) entered blocking state
[ 141.145212][ T8480] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 141.231246][ T8480] 8021q: adding VLAN 0 to HW filter on device bond0
[ 141.255291][ T3221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 141.266563][ T3221] bridge0: port 1(bridge_slave_0) entered disabled state
[ 141.275474][ T3221] bridge0: port 2(bridge_slave_1) entered disabled state
[ 141.289818][ T3221] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 141.309341][ T8480] 8021q: adding VLAN 0 to HW filter on device team0
[ 141.324090][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 141.333379][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 141.344605][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 141.352018][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 141.399364][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 141.408674][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 141.418490][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 141.425638][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 141.434721][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 141.444787][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 141.455660][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 141.466110][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 141.476620][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 141.486387][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 141.495730][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 141.505428][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 141.530675][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 141.540436][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 141.550623][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 141.562654][ T8480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 141.595917][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 141.603925][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 141.627512][ T8480] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 141.663908][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 141.673612][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 141.711369][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 141.720823][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 141.734961][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 141.744274][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 141.757913][ T8480] device veth0_vlan entered promiscuous mode
[ 141.780316][ T8480] device veth1_vlan entered promiscuous mode
[ 141.822367][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 141.831170][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 141.840862][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 141.850449][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 141.869550][ T8480] device veth0_macvtap entered promiscuous mode
[ 141.887055][ T8480] device veth1_macvtap entered promiscuous mode
[ 141.919804][ T8480] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 141.927666][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 141.937453][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 141.946495][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 141.955950][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 141.974806][ T8480] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 141.982485][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 141.992550][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
executing program
[ 142.189231][ C1] =====================================================
[ 142.196229][ C1] BUG: KMSAN: uninit-value in ip_rcv_core+0xccd/0x1490
[ 142.203082][ C1] CPU: 1 PID: 8480 Comm: syz-executor263 Not tainted 5.8.0-rc5-syzkaller #0
[ 142.211745][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 142.221780][ C1] Call Trace:
[ 142.225041][ C1]
[ 142.227894][ C1] dump_stack+0x21c/0x280
[ 142.232207][ C1] kmsan_report+0xf7/0x1e0
[ 142.236620][ C1] __msan_warning+0x58/0xa0
[ 142.241103][ C1] ip_rcv_core+0xccd/0x1490
[ 142.245605][ C1] ip_rcv+0xc7/0x810
[ 142.249483][ C1] ? kmsan_get_metadata+0x116/0x180
[ 142.254750][ C1] __netif_receive_skb+0x265/0x670
[ 142.259899][ C1] ? kmsan_set_origin_checked+0x95/0xf0
[ 142.265433][ C1] ? ip_local_deliver_finish+0x370/0x370
[ 142.271103][ C1] process_backlog+0x50d/0xba0
[ 142.275857][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[ 142.281648][ C1] ? rps_trigger_softirq+0x2e0/0x2e0
[ 142.286913][ C1] napi_poll+0x43b/0xfd0
[ 142.291162][ C1] ? kmsan_get_metadata+0x116/0x180
[ 142.296359][ C1] net_rx_action+0x35c/0xd40
[ 142.300966][ C1] ? net_tx_action+0xdc0/0xdc0
[ 142.305758][ C1] __do_softirq+0x2ea/0x7f5
[ 142.310251][ C1] asm_call_on_stack+0xf/0x20
[ 142.314901][ C1]
[ 142.317823][ C1] do_softirq_own_stack+0x7c/0xa0
[ 142.322829][ C1] __local_bh_enable_ip+0x184/0x1d0
[ 142.328009][ C1] local_bh_enable+0x36/0x40
[ 142.332577][ C1] __dev_queue_xmit+0x41a8/0x4470
[ 142.337592][ C1] dev_queue_xmit+0x4b/0x60
[ 142.342071][ C1] ? netdev_core_pick_tx+0x5a0/0x5a0
[ 142.347347][ C1] packet_sendmsg+0x8542/0x9a80
[ 142.352624][ C1] ? kmsan_get_metadata+0x116/0x180
[ 142.357818][ C1] ? kmsan_internal_set_origin+0x75/0xb0
[ 142.363437][ C1] ? kmsan_get_metadata+0x116/0x180
[ 142.368621][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[ 142.374510][ C1] ? cpu_partial_store+0xe0/0x260
[ 142.379519][ C1] ? aa_sk_perm+0x7da/0xe70
[ 142.384033][ C1] ____sys_sendmsg+0xc82/0x1240
[ 142.388869][ C1] ? compat_packet_setsockopt+0x3c0/0x3c0
[ 142.394566][ C1] __sys_sendmsg+0x6d1/0x840
[ 142.399144][ C1] ? kmsan_internal_unpoison_shadow+0x2f/0x40
[ 142.405191][ C1] ? __fpregs_load_activate+0x3f4/0x420
[ 142.410732][ C1] ? kmsan_get_metadata+0x116/0x180
[ 142.415912][ C1] __se_sys_sendmsg+0x97/0xb0
[ 142.420570][ C1] __x64_sys_sendmsg+0x4a/0x70
[ 142.425312][ C1] do_syscall_64+0xad/0x160
[ 142.429809][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 142.435693][ C1] RIP: 0033:0x4439b9
[ 142.439556][ C1] Code: Bad RIP value.
[ 142.443598][ C1] RSP: 002b:00007ffe2a741348 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 142.451984][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004439b9
[ 142.459957][ C1] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003
[ 142.467923][ C1] RBP: 00007ffe2a741360 R08: 00000000bb1414ac R09: 00000000bb1414ac
[ 142.475871][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe2a741390
[ 142.483819][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 142.491780][ C1]
[ 142.494096][ C1] Uninit was stored to memory at:
[ 142.499119][ C1] kmsan_internal_chain_origin+0xad/0x130
[ 142.504942][ C1] __msan_chain_origin+0x50/0x90
[ 142.509883][ C1] iptunnel_xmit+0xbb8/0xf00
[ 142.514462][ C1] udp_tunnel_xmit_skb+0x52a/0x650
[ 142.519555][ C1] geneve_xmit+0x180e/0x3200
[ 142.524126][ C1] xmit_one+0x3cf/0x750
[ 142.528260][ C1] __dev_queue_xmit+0x3aad/0x4470
[ 142.533261][ C1] dev_queue_xmit+0x4b/0x60
[ 142.537763][ C1] packet_sendmsg+0x8542/0x9a80
[ 142.542590][ C1] ____sys_sendmsg+0xc82/0x1240
[ 142.547502][ C1] __sys_sendmsg+0x6d1/0x840
[ 142.552073][ C1] __se_sys_sendmsg+0x97/0xb0
[ 142.556726][ C1] __x64_sys_sendmsg+0x4a/0x70
[ 142.561568][ C1] do_syscall_64+0xad/0x160
[ 142.566060][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 142.571933][ C1]
[ 142.574236][ C1] Uninit was created at:
[ 142.578457][ C1] kmsan_internal_poison_shadow+0x66/0xd0
[ 142.584151][ C1] kmsan_slab_alloc+0x8a/0xe0
[ 142.588804][ C1] __kmalloc_node_track_caller+0xeab/0x12e0
[ 142.594688][ C1] __alloc_skb+0x35f/0xb30
[ 142.599083][ C1] alloc_skb_with_frags+0x1f2/0xc10
[ 142.604256][ C1] sock_alloc_send_pskb+0xc83/0xe50
[ 142.609446][ C1] packet_sendmsg+0x6abb/0x9a80
[ 142.614272][ C1] ____sys_sendmsg+0xc82/0x1240
[ 142.619096][ C1] __sys_sendmsg+0x6d1/0x840
[ 142.623662][ C1] __se_sys_sendmsg+0x97/0xb0
[ 142.628312][ C1] __x64_sys_sendmsg+0x4a/0x70
[ 142.633053][ C1] do_syscall_64+0xad/0x160
[ 142.637531][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 142.643481][ C1] =====================================================
[ 142.650385][ C1] Disabling lock debugging due to kernel taint
[ 142.656510][ C1] Kernel panic - not syncing: panic_on_warn set ...
[ 142.663856][ C1] CPU: 1 PID: 8480 Comm: syz-executor263 Tainted: G B 5.8.0-rc5-syzkaller #0
[ 142.673886][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 142.683915][ C1] Call Trace:
[ 142.687196][ C1]
[ 142.690049][ C1] dump_stack+0x21c/0x280
[ 142.694363][ C1] panic+0x4d7/0xef7
[ 142.698252][ C1] ? add_taint+0x17c/0x210
[ 142.702651][ C1] kmsan_report+0x1df/0x1e0
[ 142.707139][ C1] __msan_warning+0x58/0xa0
[ 142.711840][ C1] ip_rcv_core+0xccd/0x1490
[ 142.716459][ C1] ip_rcv+0xc7/0x810
[ 142.720365][ C1] ? kmsan_get_metadata+0x116/0x180
[ 142.725553][ C1] __netif_receive_skb+0x265/0x670
[ 142.730653][ C1] ? kmsan_set_origin_checked+0x95/0xf0
[ 142.736182][ C1] ? ip_local_deliver_finish+0x370/0x370
[ 142.741799][ C1] process_backlog+0x50d/0xba0
[ 142.746560][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[ 142.752363][ C1] ? rps_trigger_softirq+0x2e0/0x2e0
[ 142.757625][ C1] napi_poll+0x43b/0xfd0
[ 142.761864][ C1] ? kmsan_get_metadata+0x116/0x180
[ 142.767046][ C1] net_rx_action+0x35c/0xd40
[ 142.771621][ C1] ? net_tx_action+0xdc0/0xdc0
[ 142.776378][ C1] __do_softirq+0x2ea/0x7f5
[ 142.780885][ C1] asm_call_on_stack+0xf/0x20
[ 142.785541][ C1]
[ 142.788519][ C1] do_softirq_own_stack+0x7c/0xa0
[ 142.793529][ C1] __local_bh_enable_ip+0x184/0x1d0
[ 142.798710][ C1] local_bh_enable+0x36/0x40
[ 142.803280][ C1] __dev_queue_xmit+0x41a8/0x4470
[ 142.808343][ C1] dev_queue_xmit+0x4b/0x60
[ 142.812823][ C1] ? netdev_core_pick_tx+0x5a0/0x5a0
[ 142.818086][ C1] packet_sendmsg+0x8542/0x9a80
[ 142.822921][ C1] ? kmsan_get_metadata+0x116/0x180
[ 142.828096][ C1] ? kmsan_internal_set_origin+0x75/0xb0
[ 142.833707][ C1] ? kmsan_get_metadata+0x116/0x180
[ 142.838884][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[ 142.844800][ C1] ? cpu_partial_store+0xe0/0x260
[ 142.849870][ C1] ? aa_sk_perm+0x7da/0xe70
[ 142.854380][ C1] ____sys_sendmsg+0xc82/0x1240
[ 142.859226][ C1] ? compat_packet_setsockopt+0x3c0/0x3c0
[ 142.865730][ C1] __sys_sendmsg+0x6d1/0x840
[ 142.870326][ C1] ? kmsan_internal_unpoison_shadow+0x2f/0x40
[ 142.876407][ C1] ? __fpregs_load_activate+0x3f4/0x420
[ 142.881948][ C1] ? kmsan_get_metadata+0x116/0x180
[ 142.887141][ C1] __se_sys_sendmsg+0x97/0xb0
[ 142.891803][ C1] __x64_sys_sendmsg+0x4a/0x70
[ 142.896552][ C1] do_syscall_64+0xad/0x160
[ 142.901095][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 142.906966][ C1] RIP: 0033:0x4439b9
[ 142.910833][ C1] Code: Bad RIP value.
[ 142.914876][ C1] RSP: 002b:00007ffe2a741348 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 142.923265][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004439b9
[ 142.931229][ C1] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003
[ 142.939196][ C1] RBP: 00007ffe2a741360 R08: 00000000bb1414ac R09: 00000000bb1414ac
[ 142.947146][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe2a741390
[ 142.955094][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 142.964616][ C1] Kernel Offset: disabled
[ 142.968958][ C1] Rebooting in 86400 seconds..