[ OK ] Started getty on tty2-tty6 if dbus and logind are not available. [ *] A start job is running for OpenBSD …Shell server (1min 19s / 2min 41s)[ **] A start job is running for OpenBSD …Shell server (1min 20s / 2min 41s)[ ***] A start job is running for OpenBSD …Shell server (1min 21s / 2min 41s)[ *** ] A start job is running for OpenBSD …Shell server (1min 21s / 2min 41s)[ *** ] A start job is running for OpenBSD …Shell server (1min 22s / 2min 41s)[*** ] A start job is running for OpenBSD …Shell server (1min 22s / 2min 41s)[** ] A start job is running for OpenBSD …Shell server (1min 23s / 2min 41s)[* ] A start job is running for OpenBSD …Shell server (1min 24s / 2min 53s)[ OK ] Started OpenBSD Secure Shell server. [ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Started Getty on tty6. [ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.196' (ECDSA) to the list of known hosts. syzkaller login: [ 133.380759][ T8227] IPVS: ftp: loaded support on port[0] = 21 [ 133.556386][ T8227] chnl_net:caif_netlink_parms(): no params data found [ 133.640594][ T8227] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.648116][ T8227] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.657700][ T8227] device bridge_slave_0 entered promiscuous mode [ 133.668364][ T8227] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.676332][ T8227] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.685619][ T8227] device bridge_slave_1 entered promiscuous mode [ 133.720776][ T8227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.735469][ T8227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.768652][ T8227] team0: Port device team_slave_0 added [ 133.779094][ T8227] team0: Port device team_slave_1 added [ 133.808747][ T8227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.815799][ T8227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.842051][ T8227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.856134][ T8227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.863136][ T8227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.889953][ T8227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.930828][ T8227] device hsr_slave_0 entered promiscuous mode [ 133.938271][ T8227] device hsr_slave_1 entered promiscuous mode [ 134.111653][ T8227] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 134.123102][ T8227] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 134.139398][ T8227] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 134.156504][ T8227] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 134.297673][ T8227] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.305139][ T8227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.312940][ T8227] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.320540][ T8227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.436598][ T8227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.457311][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 134.468100][ T18] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.478038][ T18] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.488264][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 134.507787][ T8227] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.520521][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 134.530281][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 134.539635][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.547360][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.562219][ T1981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 134.571554][ T1981] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 134.581007][ T1981] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.588498][ T1981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.603055][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 134.625323][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 134.641305][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 134.651778][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 134.671324][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 134.679854][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 134.690596][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 134.714352][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 134.724427][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 134.733103][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 134.742690][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 134.757098][ T8227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 134.786499][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 134.794428][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 134.814664][ T8227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.846080][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 134.856250][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 134.894431][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 134.904565][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 134.914661][ T8227] device veth0_vlan entered promiscuous mode [ 134.921954][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 134.930896][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 134.954443][ T8227] device veth1_vlan entered promiscuous mode [ 134.992606][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 135.002771][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 135.012119][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 135.021598][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 135.037990][ T8227] device veth0_macvtap entered promiscuous mode [ 135.052838][ T8227] device veth1_macvtap entered promiscuous mode [ 135.083950][ T8227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.091364][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 135.100714][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 135.109924][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 135.119841][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 135.137634][ T8227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.146534][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 135.157401][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 135.172926][ T8227] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.182559][ T8227] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.191544][ T8227] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.200480][ T8227] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 executing program [ 135.329388][ C0] ===================================================== [ 135.336377][ C0] BUG: KMSAN: uninit-value in ip_rcv_core+0xf4c/0x1480 [ 135.343256][ C0] CPU: 0 PID: 8439 Comm: syz-executor596 Not tainted 5.12.0-rc6-syzkaller #0 [ 135.352037][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 135.362092][ C0] Call Trace: [ 135.365365][ C0] [ 135.368218][ C0] dump_stack+0x24c/0x2e0 [ 135.372568][ C0] kmsan_report+0xfb/0x1e0 [ 135.377004][ C0] __msan_warning+0x5c/0xa0 [ 135.381549][ C0] ip_rcv_core+0xf4c/0x1480 [ 135.386068][ C0] ip_rcv+0xc7/0x820 [ 135.389990][ C0] ? kmsan_get_metadata+0x116/0x180 [ 135.395207][ C0] __netif_receive_skb+0x1ec/0x640 [ 135.400359][ C0] ? kmsan_set_origin_checked+0xa2/0x100 [ 135.405999][ C0] ? ip_local_deliver_finish+0x370/0x370 [ 135.411646][ C0] process_backlog+0x517/0xbd0 [ 135.416423][ C0] ? rps_trigger_softirq+0x4d0/0x4d0 [ 135.421810][ C0] __napi_poll+0x13e/0xca0 [ 135.426240][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 135.432305][ C0] net_rx_action+0x726/0x14a0 [ 135.436972][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 135.442768][ C0] ? net_tx_action+0xd30/0xd30 [ 135.447519][ C0] __do_softirq+0x1b9/0x715 [ 135.452009][ C0] ? idle_cpu+0x9a/0x1d0 [ 135.456245][ C0] ? __irq_exit_rcu+0x83/0x280 [ 135.461133][ C0] do_softirq+0x123/0x1c0 [ 135.465477][ C0] [ 135.468397][ C0] __local_bh_enable_ip+0xa1/0xb0 [ 135.473407][ C0] local_bh_enable+0x36/0x40 [ 135.477986][ C0] __dev_queue_xmit+0x3b4a/0x4600 [ 135.483017][ C0] dev_queue_xmit+0x4b/0x60 [ 135.487513][ C0] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 135.492785][ C0] packet_sendmsg+0x86ee/0x99d0 [ 135.497626][ C0] ? kmsan_get_metadata+0x116/0x180 [ 135.502833][ C0] ? kmsan_internal_set_origin+0x82/0xc0 [ 135.508478][ C0] ? process_slab+0x13a8/0x1b70 [ 135.513327][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 135.519150][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 135.525236][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 135.530076][ C0] ? packet_getsockopt+0x1120/0x1120 [ 135.535354][ C0] __sys_sendmsg+0x714/0x830 [ 135.539934][ C0] ? __msan_instrument_asm_store+0x105/0x130 [ 135.545977][ C0] ? up_read+0x40/0x2b0 [ 135.550166][ C0] ? kmsan_get_metadata+0x116/0x180 [ 135.555352][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 135.561171][ C0] ? kmsan_get_metadata+0x116/0x180 [ 135.566727][ C0] __se_sys_sendmsg+0x97/0xb0 [ 135.571391][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 135.576142][ C0] do_syscall_64+0x9f/0x140 [ 135.580632][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 135.586510][ C0] RIP: 0033:0x443de9 [ 135.590394][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 135.610012][ C0] RSP: 002b:00007ffed3f5f108 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.618441][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443de9 [ 135.626398][ C0] RDX: 0000000000000000 RSI: 0000000020000b00 RDI: 0000000000000003 [ 135.634374][ C0] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 135.642504][ C0] R10: 00007ffed3f5eb80 R11: 0000000000000246 R12: 00007ffed3f5f140 [ 135.650455][ C0] R13: 00007ffed3f5f130 R14: 00007ffed3f5f120 R15: 0000000000000003 [ 135.658407][ C0] [ 135.660704][ C0] Uninit was stored to memory at: [ 135.665695][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 135.671413][ C0] __msan_chain_origin+0x54/0xa0 [ 135.676335][ C0] iptunnel_xmit+0xbd6/0xf20 [ 135.680912][ C0] udp_tunnel_xmit_skb+0x526/0x640 [ 135.686019][ C0] geneve_xmit+0x2139/0x3c40 [ 135.690648][ C0] xmit_one+0x2b6/0x760 [ 135.694829][ C0] __dev_queue_xmit+0x3432/0x4600 [ 135.699855][ C0] dev_queue_xmit+0x4b/0x60 [ 135.704343][ C0] packet_sendmsg+0x86ee/0x99d0 [ 135.709179][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 135.714029][ C0] __sys_sendmsg+0x714/0x830 [ 135.718631][ C0] __se_sys_sendmsg+0x97/0xb0 [ 135.723321][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 135.728093][ C0] do_syscall_64+0x9f/0x140 [ 135.732592][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 135.738520][ C0] [ 135.740881][ C0] Uninit was created at: [ 135.745112][ C0] kmsan_internal_poison_shadow+0x66/0xd0 [ 135.750835][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 135.755493][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 135.761368][ C0] __alloc_skb+0x4dd/0xe90 [ 135.766098][ C0] alloc_skb_with_frags+0x1f3/0xc10 [ 135.771289][ C0] sock_alloc_send_pskb+0xdc1/0xf90 [ 135.776508][ C0] packet_sendmsg+0x6a12/0x99d0 [ 135.781346][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 135.786194][ C0] __sys_sendmsg+0x714/0x830 [ 135.790840][ C0] __se_sys_sendmsg+0x97/0xb0 [ 135.795506][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 135.800300][ C0] do_syscall_64+0x9f/0x140 [ 135.804846][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 135.810761][ C0] ===================================================== [ 135.817677][ C0] Disabling lock debugging due to kernel taint [ 135.823826][ C0] Kernel panic - not syncing: panic_on_kmsan set ... [ 135.830473][ C0] CPU: 0 PID: 8439 Comm: syz-executor596 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 135.840617][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 135.850653][ C0] Call Trace: [ 135.853926][ C0] [ 135.856765][ C0] dump_stack+0x24c/0x2e0 [ 135.861115][ C0] panic+0x4c6/0xea7 [ 135.865397][ C0] ? add_taint+0x17c/0x210 [ 135.869793][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 135.875934][ C0] kmsan_report+0x1de/0x1e0 [ 135.880428][ C0] __msan_warning+0x5c/0xa0 [ 135.884915][ C0] ip_rcv_core+0xf4c/0x1480 [ 135.889406][ C0] ip_rcv+0xc7/0x820 [ 135.893287][ C0] ? kmsan_get_metadata+0x116/0x180 [ 135.898480][ C0] __netif_receive_skb+0x1ec/0x640 [ 135.903607][ C0] ? kmsan_set_origin_checked+0xa2/0x100 [ 135.909224][ C0] ? ip_local_deliver_finish+0x370/0x370 [ 135.914955][ C0] process_backlog+0x517/0xbd0 [ 135.919714][ C0] ? rps_trigger_softirq+0x4d0/0x4d0 [ 135.924983][ C0] __napi_poll+0x13e/0xca0 [ 135.929382][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 135.935428][ C0] net_rx_action+0x726/0x14a0 [ 135.940127][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 135.945916][ C0] ? net_tx_action+0xd30/0xd30 [ 135.950665][ C0] __do_softirq+0x1b9/0x715 [ 135.955155][ C0] ? idle_cpu+0x9a/0x1d0 [ 135.959388][ C0] ? __irq_exit_rcu+0x83/0x280 [ 135.964138][ C0] do_softirq+0x123/0x1c0 [ 135.968459][ C0] [ 135.971393][ C0] __local_bh_enable_ip+0xa1/0xb0 [ 135.976422][ C0] local_bh_enable+0x36/0x40 [ 135.981000][ C0] __dev_queue_xmit+0x3b4a/0x4600 [ 135.986024][ C0] dev_queue_xmit+0x4b/0x60 [ 135.990547][ C0] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 135.995821][ C0] packet_sendmsg+0x86ee/0x99d0 [ 136.000659][ C0] ? kmsan_get_metadata+0x116/0x180 [ 136.005846][ C0] ? kmsan_internal_set_origin+0x82/0xc0 [ 136.011488][ C0] ? process_slab+0x13a8/0x1b70 [ 136.016337][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 136.022170][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 136.028295][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 136.033145][ C0] ? packet_getsockopt+0x1120/0x1120 [ 136.038662][ C0] __sys_sendmsg+0x714/0x830 [ 136.043242][ C0] ? __msan_instrument_asm_store+0x105/0x130 [ 136.049209][ C0] ? up_read+0x40/0x2b0 [ 136.053383][ C0] ? kmsan_get_metadata+0x116/0x180 [ 136.058563][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 136.064353][ C0] ? kmsan_get_metadata+0x116/0x180 [ 136.069571][ C0] __se_sys_sendmsg+0x97/0xb0 [ 136.074277][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 136.079028][ C0] do_syscall_64+0x9f/0x140 [ 136.083519][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 136.089398][ C0] RIP: 0033:0x443de9 [ 136.093277][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 136.112891][ C0] RSP: 002b:00007ffed3f5f108 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 136.121351][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443de9 [ 136.129313][ C0] RDX: 0000000000000000 RSI: 0000000020000b00 RDI: 0000000000000003 [ 136.137301][ C0] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 136.145276][ C0] R10: 00007ffed3f5eb80 R11: 0000000000000246 R12: 00007ffed3f5f140 [ 136.153251][ C0] R13: 00007ffed3f5f130 R14: 00007ffed3f5f120 R15: 0000000000000003 [ 136.162139][ C0] Kernel Offset: disabled [ 136.166493][ C0] Rebooting in 86400 seconds..