[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.172' (ECDSA) to the list of known hosts. syzkaller login: [ 140.483258][ T8224] IPVS: ftp: loaded support on port[0] = 21 [ 140.639545][ T8224] chnl_net:caif_netlink_parms(): no params data found [ 140.717306][ T8224] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.725398][ T8224] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.734635][ T8224] device bridge_slave_0 entered promiscuous mode [ 140.746004][ T8224] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.753616][ T8224] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.761763][ T8224] device bridge_slave_1 entered promiscuous mode [ 140.795110][ T8224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.808216][ T8224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.840247][ T8224] team0: Port device team_slave_0 added [ 140.849634][ T8224] team0: Port device team_slave_1 added [ 140.879584][ T8224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.887501][ T8224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.913943][ T8224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.927607][ T8224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.935834][ T8224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.962285][ T8224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.002124][ T8224] device hsr_slave_0 entered promiscuous mode [ 141.009457][ T8224] device hsr_slave_1 entered promiscuous mode [ 141.174594][ T8224] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 141.189259][ T8224] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 141.213154][ T8224] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 141.229184][ T8224] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 141.303466][ T8224] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.310841][ T8224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.318761][ T8224] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.326249][ T8224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.398696][ T8224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.419624][ T3457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 141.430279][ T3457] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.440465][ T3457] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.450706][ T3457] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 141.469988][ T8224] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.487759][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 141.497082][ T4687] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.504751][ T4687] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.520739][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 141.530070][ T8432] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.537471][ T8432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.568402][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 141.579464][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 141.598283][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 141.616892][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 141.626202][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 141.645265][ T8224] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 141.657150][ T8224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 141.667399][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 141.677008][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 141.707497][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 141.715568][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 141.736067][ T8224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.768926][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 141.779308][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 141.810033][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 141.819639][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 141.832404][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 141.841168][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 141.854910][ T8224] device veth0_vlan entered promiscuous mode [ 141.874093][ T8224] device veth1_vlan entered promiscuous mode [ 141.910477][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 141.919677][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 141.929107][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 141.938706][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 141.955509][ T8224] device veth0_macvtap entered promiscuous mode [ 141.969075][ T8224] device veth1_macvtap entered promiscuous mode [ 141.997994][ T8224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.006002][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 142.015260][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 142.024084][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 142.033853][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 142.050222][ T8224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.058030][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 142.067991][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 142.084715][ T8224] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.094067][ T8224] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.104066][ T8224] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.113228][ T8224] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 executing program [ 142.246281][ C0] ===================================================== [ 142.253440][ C0] BUG: KMSAN: uninit-value in ip_rcv_core+0xf4c/0x1480 [ 142.260335][ C0] CPU: 0 PID: 8435 Comm: syz-executor834 Not tainted 5.12.0-rc6-syzkaller #0 [ 142.269108][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 142.279168][ C0] Call Trace: [ 142.282455][ C0] [ 142.285302][ C0] dump_stack+0x24c/0x2e0 [ 142.289663][ C0] kmsan_report+0xfb/0x1e0 [ 142.294143][ C0] __msan_warning+0x5c/0xa0 [ 142.298677][ C0] ip_rcv_core+0xf4c/0x1480 [ 142.303214][ C0] ip_rcv+0xc7/0x820 [ 142.307123][ C0] ? kmsan_get_metadata+0x116/0x180 [ 142.312338][ C0] __netif_receive_skb+0x1ec/0x640 [ 142.317592][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 142.323217][ C0] ? ip_local_deliver_finish+0x370/0x370 [ 142.329151][ C0] process_backlog+0x517/0xbd0 [ 142.333914][ C0] ? rps_trigger_softirq+0x4d0/0x4d0 [ 142.339322][ C0] __napi_poll+0x13e/0xca0 [ 142.343733][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 142.349796][ C0] net_rx_action+0x726/0x14a0 [ 142.354463][ C0] ? net_tx_action+0xd30/0xd30 [ 142.359326][ C0] __do_softirq+0x1b9/0x715 [ 142.363821][ C0] ? idle_cpu+0x9a/0x1d0 [ 142.368060][ C0] ? __irq_exit_rcu+0x83/0x280 [ 142.372843][ C0] do_softirq+0x123/0x1c0 [ 142.377164][ C0] [ 142.380082][ C0] __local_bh_enable_ip+0xa1/0xb0 [ 142.385097][ C0] local_bh_enable+0x36/0x40 [ 142.389693][ C0] __dev_queue_xmit+0x3b4a/0x4600 [ 142.394720][ C0] dev_queue_xmit+0x4b/0x60 [ 142.399215][ C0] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 142.404494][ C0] packet_sendmsg+0x86ee/0x99d0 [ 142.409345][ C0] ? kmsan_get_metadata+0x116/0x180 [ 142.414529][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 142.420149][ C0] ? process_slab+0x13a8/0x1b70 [ 142.424995][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 142.430815][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 142.436879][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 142.441740][ C0] ? packet_getsockopt+0x1120/0x1120 [ 142.447206][ C0] __sys_sendmsg+0x714/0x830 [ 142.451790][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 142.457421][ C0] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 142.463487][ C0] ? __msan_instrument_asm_store+0x107/0x130 [ 142.469454][ C0] ? kmsan_get_metadata+0x116/0x180 [ 142.474664][ C0] __se_sys_sendmsg+0x97/0xb0 [ 142.479374][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 142.484173][ C0] do_syscall_64+0x9f/0x140 [ 142.488699][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 142.494609][ C0] RIP: 0033:0x443de9 [ 142.498696][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 142.518702][ C0] RSP: 002b:00007ffeb97b0d28 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.527239][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443de9 [ 142.535285][ C0] RDX: 0000000000000000 RSI: 0000000020000b00 RDI: 0000000000000003 [ 142.543423][ C0] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 142.551380][ C0] R10: 00007ffeb97b07a0 R11: 0000000000000246 R12: 00007ffeb97b0d60 [ 142.559339][ C0] R13: 00007ffeb97b0d50 R14: 00007ffeb97b0d40 R15: 0000000000000003 [ 142.567304][ C0] [ 142.569613][ C0] Uninit was stored to memory at: [ 142.574624][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 142.580450][ C0] __msan_chain_origin+0x54/0xa0 [ 142.585397][ C0] iptunnel_xmit+0xbd6/0xf20 [ 142.590064][ C0] udp_tunnel_xmit_skb+0x526/0x640 [ 142.595274][ C0] geneve_xmit+0x2139/0x3c40 [ 142.599854][ C0] xmit_one+0x2b6/0x760 [ 142.604016][ C0] __dev_queue_xmit+0x3432/0x4600 [ 142.609050][ C0] dev_queue_xmit+0x4b/0x60 [ 142.613576][ C0] packet_sendmsg+0x86ee/0x99d0 [ 142.618419][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 142.623301][ C0] __sys_sendmsg+0x714/0x830 [ 142.627888][ C0] __se_sys_sendmsg+0x97/0xb0 [ 142.632553][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 142.637356][ C0] do_syscall_64+0x9f/0x140 [ 142.641852][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 142.648119][ C0] [ 142.650430][ C0] Uninit was created at: [ 142.654648][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 142.660376][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 142.665054][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 142.671025][ C0] __alloc_skb+0x4dd/0xe90 [ 142.675532][ C0] alloc_skb_with_frags+0x1f3/0xc10 [ 142.680724][ C0] sock_alloc_send_pskb+0xdc1/0xf90 [ 142.685947][ C0] packet_sendmsg+0x6a12/0x99d0 [ 142.690832][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 142.695670][ C0] __sys_sendmsg+0x714/0x830 [ 142.700275][ C0] __se_sys_sendmsg+0x97/0xb0 [ 142.704939][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 142.709735][ C0] do_syscall_64+0x9f/0x140 [ 142.714255][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 142.720224][ C0] ===================================================== [ 142.727156][ C0] Disabling lock debugging due to kernel taint [ 142.733381][ C0] Kernel panic - not syncing: panic_on_kmsan set ... [ 142.740056][ C0] CPU: 0 PID: 8435 Comm: syz-executor834 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 142.750471][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 142.760542][ C0] Call Trace: [ 142.763837][ C0] [ 142.766667][ C0] dump_stack+0x24c/0x2e0 [ 142.771005][ C0] panic+0x4c6/0xea7 [ 142.774917][ C0] ? add_taint+0x17c/0x210 [ 142.779420][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 142.785576][ C0] kmsan_report+0x1de/0x1e0 [ 142.790082][ C0] __msan_warning+0x5c/0xa0 [ 142.794572][ C0] ip_rcv_core+0xf4c/0x1480 [ 142.799069][ C0] ip_rcv+0xc7/0x820 [ 142.803045][ C0] ? kmsan_get_metadata+0x116/0x180 [ 142.808272][ C0] __netif_receive_skb+0x1ec/0x640 [ 142.813409][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 142.819056][ C0] ? ip_local_deliver_finish+0x370/0x370 [ 142.824682][ C0] process_backlog+0x517/0xbd0 [ 142.829443][ C0] ? rps_trigger_softirq+0x4d0/0x4d0 [ 142.834811][ C0] __napi_poll+0x13e/0xca0 [ 142.839247][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 142.845322][ C0] net_rx_action+0x726/0x14a0 [ 142.849993][ C0] ? net_tx_action+0xd30/0xd30 [ 142.854745][ C0] __do_softirq+0x1b9/0x715 [ 142.859359][ C0] ? idle_cpu+0x9a/0x1d0 [ 142.863615][ C0] ? __irq_exit_rcu+0x83/0x280 [ 142.868402][ C0] do_softirq+0x123/0x1c0 [ 142.872728][ C0] [ 142.875672][ C0] __local_bh_enable_ip+0xa1/0xb0 [ 142.880702][ C0] local_bh_enable+0x36/0x40 [ 142.885318][ C0] __dev_queue_xmit+0x3b4a/0x4600 [ 142.890376][ C0] dev_queue_xmit+0x4b/0x60 [ 142.895065][ C0] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 142.900353][ C0] packet_sendmsg+0x86ee/0x99d0 [ 142.905337][ C0] ? kmsan_get_metadata+0x116/0x180 [ 142.910539][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 142.916159][ C0] ? process_slab+0x13a8/0x1b70 [ 142.921005][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 142.926818][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 142.932923][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 142.937764][ C0] ? packet_getsockopt+0x1120/0x1120 [ 142.943040][ C0] __sys_sendmsg+0x714/0x830 [ 142.947794][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 142.953506][ C0] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 142.959559][ C0] ? __msan_instrument_asm_store+0x107/0x130 [ 142.965535][ C0] ? kmsan_get_metadata+0x116/0x180 [ 142.970725][ C0] __se_sys_sendmsg+0x97/0xb0 [ 142.975402][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 142.980539][ C0] do_syscall_64+0x9f/0x140 [ 142.985084][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 142.990981][ C0] RIP: 0033:0x443de9 [ 142.994862][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 143.014612][ C0] RSP: 002b:00007ffeb97b0d28 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 143.023016][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443de9 [ 143.030974][ C0] RDX: 0000000000000000 RSI: 0000000020000b00 RDI: 0000000000000003 [ 143.039021][ C0] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 143.047258][ C0] R10: 00007ffeb97b07a0 R11: 0000000000000246 R12: 00007ffeb97b0d60 [ 143.055304][ C0] R13: 00007ffeb97b0d50 R14: 00007ffeb97b0d40 R15: 0000000000000003 [ 143.064101][ C0] Kernel Offset: disabled [ 143.068550][ C0] Rebooting in 86400 seconds..