[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 53.165967] audit: type=1800 audit(1541666766.218:25): pid=6102 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 53.185447] audit: type=1800 audit(1541666766.218:26): pid=6102 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 53.205546] audit: type=1800 audit(1541666766.238:27): pid=6102 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.3' (ECDSA) to the list of known hosts. 2018/11/08 08:46:18 parsed 1 programs 2018/11/08 08:46:24 executed programs: 0 syzkaller login: [ 71.784263] IPVS: ftp: loaded support on port[0] = 21 [ 72.253609] ip (6294) used greatest stack depth: 53688 bytes left [ 72.354302] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.360713] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.369058] device bridge_slave_0 entered promiscuous mode [ 72.406403] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.413424] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.421046] device bridge_slave_1 entered promiscuous mode [ 72.457048] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 72.492778] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 72.573925] ip (6310) used greatest stack depth: 53664 bytes left [ 72.605462] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 72.645418] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 72.819150] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 72.826839] team0: Port device team_slave_0 added [ 72.863302] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 72.870935] team0: Port device team_slave_1 added [ 72.906966] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.947517] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.987136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.027111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.393863] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.400278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.407862] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.414425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.422675] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 74.251902] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.758567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.885164] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 75.012811] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 75.019214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.027199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.151846] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.950394] ================================================================== [ 75.957812] BUG: KMSAN: uninit-value in gre_rcv+0x11a3/0x1900 [ 75.963707] CPU: 1 PID: 6521 Comm: syz-executor0 Not tainted 4.19.0+ #78 [ 75.970596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 75.979954] Call Trace: [ 75.982541] [ 75.984749] dump_stack+0x32d/0x480 [ 75.988370] ? _raw_spin_lock_irqsave+0x237/0x340 [ 75.993228] ? gre_rcv+0x11a3/0x1900 [ 75.996957] kmsan_report+0x19f/0x300 [ 76.000759] __msan_warning+0x76/0xd0 [ 76.004555] gre_rcv+0x11a3/0x1900 [ 76.008092] ? raw_local_deliver+0xa0/0x1890 [ 76.012527] ? erspan_xmit+0x35d0/0x35d0 [ 76.016595] gre_rcv+0x2e6/0x3c0 [ 76.020018] ? gre_parse_header+0x1430/0x1430 [ 76.024509] ip_local_deliver_finish+0x8cf/0xff0 [ 76.029271] ip_local_deliver+0x44b/0x510 [ 76.033420] ? ip_local_deliver+0x510/0x510 [ 76.037738] ? ip_call_ra_chain+0x7a0/0x7a0 [ 76.042059] ip_rcv+0x6b6/0x740 [ 76.045336] ? ip_rcv_core+0x1360/0x1360 [ 76.049448] process_backlog+0x82b/0x11e0 [ 76.053597] ? ip_local_deliver_finish+0xff0/0xff0 [ 76.058542] ? rps_trigger_softirq+0x2e0/0x2e0 [ 76.063133] net_rx_action+0x98f/0x1d50 [ 76.067113] ? net_tx_action+0xf20/0xf20 [ 76.071170] __do_softirq+0x721/0xc5d [ 76.074987] do_softirq_own_stack+0x49/0x80 [ 76.079298] [ 76.081547] __local_bh_enable_ip+0x228/0x260 [ 76.086049] local_bh_enable+0x36/0x40 [ 76.089944] ip_finish_output2+0x1430/0x1560 [ 76.094367] ip_finish_output+0xd93/0x10f0 [ 76.098603] ip_mc_output+0xf25/0x10f0 [ 76.102509] ? ip_mc_finish_output+0x440/0x440 [ 76.107100] ? ip_build_and_send_pkt+0xe60/0xe60 [ 76.111872] raw_sendmsg+0x403b/0x43d0 [ 76.115784] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 76.121146] ? raw_getfrag+0x580/0x580 [ 76.125049] ? compat_raw_ioctl+0x100/0x100 [ 76.129375] inet_sendmsg+0x4e9/0x800 [ 76.133276] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 76.138642] ? security_socket_sendmsg+0x1bd/0x200 [ 76.143569] ? inet_getname+0x490/0x490 [ 76.147538] __sys_sendto+0x97b/0xb80 [ 76.151357] ? syscall_return_slowpath+0x123/0x8c0 [ 76.156280] ? put_timespec64+0x162/0x220 [ 76.160425] __se_sys_sendto+0x107/0x130 [ 76.164492] __x64_sys_sendto+0x6e/0x90 [ 76.168463] do_syscall_64+0xcf/0x110 [ 76.172271] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 76.177465] RIP: 0033:0x457569 [ 76.180652] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 76.199810] RSP: 002b:00007ffc6c4cfa88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 76.207520] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457569 [ 76.214796] RDX: 0000000000000104 RSI: 00000000200000c0 RDI: 0000000000000003 [ 76.222117] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 76.229434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000002538914 [ 76.236698] R13: 00000000004c3b86 R14: 00000000004d5cc8 R15: 00000000ffffffff [ 76.243962] [ 76.245582] Uninit was stored to memory at: [ 76.249911] kmsan_internal_chain_origin+0x136/0x240 [ 76.255013] kmsan_memcpy_origins+0x13d/0x1b0 [ 76.259503] __msan_memcpy+0x6f/0x80 [ 76.263216] pskb_expand_head+0x43b/0x1d20 [ 76.267444] ip_tunnel_xmit+0x35cb/0x3db0 [ 76.271596] erspan_xmit+0x1bce/0x35d0 [ 76.275484] dev_hard_start_xmit+0x6dc/0xe00 [ 76.279887] sch_direct_xmit+0x59b/0x890 [ 76.283938] __qdisc_run+0x1bac/0x3600 [ 76.287819] __dev_queue_xmit+0x2131/0x3e00 [ 76.292135] dev_queue_xmit+0x4b/0x60 [ 76.295935] neigh_resolve_output+0xab8/0xb60 [ 76.300421] ip_finish_output2+0x141a/0x1560 [ 76.304839] ip_finish_output+0xd93/0x10f0 [ 76.309074] ip_mc_output+0xf25/0x10f0 [ 76.312955] raw_sendmsg+0x403b/0x43d0 [ 76.316837] inet_sendmsg+0x4e9/0x800 [ 76.320634] __sys_sendto+0x97b/0xb80 [ 76.324425] __se_sys_sendto+0x107/0x130 [ 76.328478] __x64_sys_sendto+0x6e/0x90 [ 76.332455] do_syscall_64+0xcf/0x110 [ 76.336269] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 76.341458] [ 76.343075] Uninit was created at: [ 76.346608] kmsan_internal_poison_shadow+0xc8/0x1e0 [ 76.351722] kmsan_kmalloc+0x98/0x110 [ 76.355525] kmsan_slab_alloc+0xe/0x10 [ 76.359403] __kmalloc_node_track_caller+0xf62/0x14e0 [ 76.364584] __alloc_skb+0x42b/0xeb0 [ 76.368298] alloc_skb_with_frags+0x1c9/0xa80 [ 76.372794] sock_alloc_send_pskb+0xeb3/0x14c0 [ 76.377368] sock_alloc_send_skb+0xca/0xe0 [ 76.381607] raw_sendmsg+0x234b/0x43d0 [ 76.385493] inet_sendmsg+0x4e9/0x800 [ 76.389288] __sys_sendto+0x97b/0xb80 [ 76.393081] __se_sys_sendto+0x107/0x130 [ 76.397134] __x64_sys_sendto+0x6e/0x90 [ 76.401133] do_syscall_64+0xcf/0x110 [ 76.404926] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 76.410106] ================================================================== [ 76.417457] Disabling lock debugging due to kernel taint [ 76.422966] Kernel panic - not syncing: panic_on_warn set ... [ 76.422966] [ 76.431393] CPU: 1 PID: 6521 Comm: syz-executor0 Tainted: G B 4.19.0+ #78 [ 76.439608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 76.448952] Call Trace: [ 76.451537] [ 76.453725] dump_stack+0x32d/0x480 [ 76.457354] panic+0x57e/0xb28 [ 76.460575] kmsan_report+0x300/0x300 [ 76.464376] __msan_warning+0x76/0xd0 [ 76.468186] gre_rcv+0x11a3/0x1900 [ 76.471725] ? raw_local_deliver+0xa0/0x1890 [ 76.476138] ? erspan_xmit+0x35d0/0x35d0 [ 76.480205] gre_rcv+0x2e6/0x3c0 [ 76.483569] ? gre_parse_header+0x1430/0x1430 [ 76.488060] ip_local_deliver_finish+0x8cf/0xff0 [ 76.492818] ip_local_deliver+0x44b/0x510 [ 76.496966] ? ip_local_deliver+0x510/0x510 [ 76.501284] ? ip_call_ra_chain+0x7a0/0x7a0 [ 76.505599] ip_rcv+0x6b6/0x740 [ 76.508877] ? ip_rcv_core+0x1360/0x1360 [ 76.512950] process_backlog+0x82b/0x11e0 [ 76.517102] ? ip_local_deliver_finish+0xff0/0xff0 [ 76.522033] ? rps_trigger_softirq+0x2e0/0x2e0 [ 76.526611] net_rx_action+0x98f/0x1d50 [ 76.530639] ? net_tx_action+0xf20/0xf20 [ 76.535155] __do_softirq+0x721/0xc5d [ 76.538990] do_softirq_own_stack+0x49/0x80 [ 76.543313] [ 76.545549] __local_bh_enable_ip+0x228/0x260 [ 76.550038] local_bh_enable+0x36/0x40 [ 76.553922] ip_finish_output2+0x1430/0x1560 [ 76.558330] ip_finish_output+0xd93/0x10f0 [ 76.562568] ip_mc_output+0xf25/0x10f0 [ 76.566466] ? ip_mc_finish_output+0x440/0x440 [ 76.571041] ? ip_build_and_send_pkt+0xe60/0xe60 [ 76.575794] raw_sendmsg+0x403b/0x43d0 [ 76.579697] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 76.585063] ? raw_getfrag+0x580/0x580 [ 76.588950] ? compat_raw_ioctl+0x100/0x100 [ 76.593277] inet_sendmsg+0x4e9/0x800 [ 76.597074] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 76.602431] ? security_socket_sendmsg+0x1bd/0x200 [ 76.607374] ? inet_getname+0x490/0x490 [ 76.611361] __sys_sendto+0x97b/0xb80 [ 76.615168] ? syscall_return_slowpath+0x123/0x8c0 [ 76.620104] ? put_timespec64+0x162/0x220 [ 76.624247] __se_sys_sendto+0x107/0x130 [ 76.628306] __x64_sys_sendto+0x6e/0x90 [ 76.632285] do_syscall_64+0xcf/0x110 [ 76.636094] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 76.641276] RIP: 0033:0x457569 [ 76.644940] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 76.663837] RSP: 002b:00007ffc6c4cfa88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 76.671551] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457569 [ 76.678834] RDX: 0000000000000104 RSI: 00000000200000c0 RDI: 0000000000000003 [ 76.686107] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 76.693368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000002538914 [ 76.700630] R13: 00000000004c3b86 R14: 00000000004d5cc8 R15: 00000000ffffffff [ 76.709015] Kernel Offset: disabled [ 76.712647] Rebooting in 86400 seconds..