[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 81.093593][ T30] audit: type=1800 audit(1573172232.146:25): pid=11797 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 81.116442][ T30] audit: type=1800 audit(1573172232.166:26): pid=11797 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 81.143383][ T30] audit: type=1800 audit(1573172232.186:27): pid=11797 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.58' (ECDSA) to the list of known hosts. syzkaller login: [ 91.221056][T11952] IPVS: ftp: loaded support on port[0] = 21 [ 91.246015][T11960] IPVS: ftp: loaded support on port[0] = 21 [ 91.247796][T11955] IPVS: ftp: loaded support on port[0] = 21 [ 91.282023][T11959] IPVS: ftp: loaded support on port[0] = 21 [ 91.296716][T11958] IPVS: ftp: loaded support on port[0] = 21 [ 91.331196][T11961] IPVS: ftp: loaded support on port[0] = 21 [ 91.490333][T11952] chnl_net:caif_netlink_parms(): no params data found [ 91.791443][T11960] chnl_net:caif_netlink_parms(): no params data found [ 91.818751][T11955] chnl_net:caif_netlink_parms(): no params data found [ 91.829615][T11958] chnl_net:caif_netlink_parms(): no params data found [ 91.840395][T11952] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.847658][T11952] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.855860][T11952] device bridge_slave_0 entered promiscuous mode [ 91.882348][T11961] chnl_net:caif_netlink_parms(): no params data found [ 91.940001][T11952] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.947342][T11952] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.955605][T11952] device bridge_slave_1 entered promiscuous mode [ 92.046496][T11959] chnl_net:caif_netlink_parms(): no params data found [ 92.093518][T11958] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.100877][T11958] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.109402][T11958] device bridge_slave_0 entered promiscuous mode [ 92.147557][T11952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.157043][T11955] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.164288][T11955] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.172753][T11955] device bridge_slave_0 entered promiscuous mode [ 92.186220][T11955] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.193467][T11955] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.201986][T11955] device bridge_slave_1 entered promiscuous mode [ 92.209976][T11961] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.217181][T11961] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.225744][T11961] device bridge_slave_0 entered promiscuous mode [ 92.234177][T11961] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.241329][T11961] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.250030][T11961] device bridge_slave_1 entered promiscuous mode [ 92.257631][T11960] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.265160][T11960] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.273809][T11960] device bridge_slave_0 entered promiscuous mode [ 92.291497][T11958] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.298734][T11958] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.307540][T11958] device bridge_slave_1 entered promiscuous mode [ 92.317527][T11952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.363565][T11960] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.370748][T11960] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.379107][T11960] device bridge_slave_1 entered promiscuous mode [ 92.413529][T11958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.425785][T11961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.437445][T11958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.480952][T11955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.492818][T11961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.504619][T11955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.541622][T11960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.553697][T11958] team0: Port device team_slave_0 added [ 92.562235][T11960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.574500][T11952] team0: Port device team_slave_0 added [ 92.588705][T11952] team0: Port device team_slave_1 added [ 92.610382][T11959] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.617546][T11959] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.626293][T11959] device bridge_slave_0 entered promiscuous mode [ 92.645030][T11958] team0: Port device team_slave_1 added [ 92.669329][T11959] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.676662][T11959] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.684815][T11959] device bridge_slave_1 entered promiscuous mode [ 92.705280][T11960] team0: Port device team_slave_0 added [ 92.722184][T11961] team0: Port device team_slave_0 added [ 92.731311][T11961] team0: Port device team_slave_1 added [ 92.739996][T11955] team0: Port device team_slave_0 added [ 92.759676][T11960] team0: Port device team_slave_1 added [ 92.843332][T11955] team0: Port device team_slave_1 added [ 92.885943][T11958] device hsr_slave_0 entered promiscuous mode [ 92.934125][T11958] device hsr_slave_1 entered promiscuous mode [ 92.976982][T11959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.025948][T11960] device hsr_slave_0 entered promiscuous mode [ 93.063933][T11960] device hsr_slave_1 entered promiscuous mode [ 93.113248][T11960] debugfs: Directory 'hsr0' with parent '/' already present! [ 93.166083][T11961] device hsr_slave_0 entered promiscuous mode [ 93.203778][T11961] device hsr_slave_1 entered promiscuous mode [ 93.243405][T11961] debugfs: Directory 'hsr0' with parent '/' already present! [ 93.285943][T11952] device hsr_slave_0 entered promiscuous mode [ 93.323613][T11952] device hsr_slave_1 entered promiscuous mode [ 93.383310][T11952] debugfs: Directory 'hsr0' with parent '/' already present! [ 93.403656][T11959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.485961][T11955] device hsr_slave_0 entered promiscuous mode [ 93.533937][T11955] device hsr_slave_1 entered promiscuous mode [ 93.583300][T11955] debugfs: Directory 'hsr0' with parent '/' already present! [ 93.839485][T11959] team0: Port device team_slave_0 added [ 93.975676][T11959] team0: Port device team_slave_1 added [ 94.189082][T11959] device hsr_slave_0 entered promiscuous mode [ 94.317189][T11959] device hsr_slave_1 entered promiscuous mode [ 94.444189][T11959] debugfs: Directory 'hsr0' with parent '/' already present! [ 95.205940][T11952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.229778][T11958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.451105][T11955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.525287][T11960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.564817][T11961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.612386][T11952] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.646231][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 95.655313][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.663813][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 95.672372][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.778105][T11958] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.838972][T11960] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.888337][T11955] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.918196][T11961] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.274117][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.282513][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.291550][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.300184][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.308766][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.317253][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.325769][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 96.335262][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.344285][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.351463][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.359847][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 96.369276][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.378317][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.385564][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.394113][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 96.403655][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.412693][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.419937][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.428493][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 96.437981][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.447028][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.454264][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.462731][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 96.472900][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 96.482956][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 96.492418][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.501517][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.508742][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.517288][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 96.526767][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.535801][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.542967][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.551517][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 96.561034][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.570075][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.577387][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.585909][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 96.595273][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.604239][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.611492][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.620038][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 96.629565][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.638633][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.645871][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.654429][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 96.663898][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.672945][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.680200][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.688735][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 96.698850][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 96.708953][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 96.718835][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 96.728403][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 96.738267][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 96.748061][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 96.758076][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 96.768148][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 96.778266][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 96.918707][T11959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.040860][T11958] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 97.051418][T11958] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.146228][T11952] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 97.156707][T11952] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.193563][T11960] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 97.204038][T11960] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.272371][T11961] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 97.282909][T11961] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.301761][T11955] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 97.312681][T11955] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.466329][T11959] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.816123][T11960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.832430][T11958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.860978][T11952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.886566][T11961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.925977][T11955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.194555][T11959] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 98.205463][T11959] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network executing program [ 98.687797][T12117] ===================================================== [ 98.694901][T12117] BUG: KMSAN: uninit-value in ip_tunnel_xmit+0x3c6/0x3320 [ 98.702022][T12117] CPU: 0 PID: 12117 Comm: syz-executor070 Not tainted 5.4.0-rc5+ #0 [ 98.709999][T12117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 98.720058][T12117] Call Trace: [ 98.723358][T12117] dump_stack+0x191/0x1f0 [ 98.727701][T12117] kmsan_report+0x128/0x220 [ 98.732221][T12117] __msan_warning+0x73/0xe0 [ 98.736735][T12117] ip_tunnel_xmit+0x3c6/0x3320 [ 98.741514][T12117] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 98.747586][T12117] ? skb_push+0x15b/0x250 [ 98.751935][T12117] ? gre_build_header+0x3ec/0x9f0 [ 98.756976][T12117] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 98.762884][T12117] ipgre_xmit+0xff3/0x1120 [ 98.767325][T12117] ? ipgre_close+0x240/0x240 [ 98.771926][T12117] dev_hard_start_xmit+0x51a/0xab0 [ 98.778453][T12117] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 98.784361][T12117] __dev_queue_xmit+0x35b6/0x4200 [ 98.789427][T12117] dev_queue_xmit+0x4b/0x60 [ 98.793940][T12117] ? netdev_core_pick_tx+0x4d0/0x4d0 [ 98.799253][T12117] packet_sendmsg+0x82d7/0x92e0 [ 98.804111][T12117] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 98.810206][T12117] ? aa_label_sk_perm+0x6d6/0x940 [ 98.815257][T12117] ? kmsan_get_metadata+0x39/0x350 [ 98.820381][T12117] ? kmsan_internal_set_origin+0x6a/0xb0 [ 98.826025][T12117] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 98.831929][T12117] ? aa_sk_perm+0x730/0xaf0 [ 98.836476][T12117] ? compat_packet_setsockopt+0x360/0x360 [ 98.842197][T12117] ___sys_sendmsg+0x14ff/0x1590 [ 98.847073][T12117] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 98.852980][T12117] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 98.859051][T12117] ? __fget_light+0x1b8/0x710 [ 98.863751][T12117] __se_sys_sendmsg+0x305/0x460 [ 98.868623][T12117] __x64_sys_sendmsg+0x4a/0x70 [ 98.873392][T12117] do_syscall_64+0xb6/0x160 [ 98.877904][T12117] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 98.883798][T12117] RIP: 0033:0x4425d9 [ 98.887695][T12117] Code: e8 0c e8 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 6b 09 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 98.907306][T12117] RSP: 002b:00007ffe4a75c348 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.915855][T12117] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004425d9 [ 98.923858][T12117] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 executing program executing program [ 98.931840][T12117] RBP: 0000000000000003 R08: 0000000000000025 R09: 0000000000000025 [ 98.939815][T12117] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000013 [ 98.947816][T12117] R13: 0000000000403460 R14: 0000000000000000 R15: 0000000000000000 [ 98.955841][T12117] [ 98.958166][T12117] Uninit was created at: [ 98.962417][T12117] kmsan_internal_poison_shadow+0x60/0x120 [ 98.968228][T12117] kmsan_slab_alloc+0xaa/0x120 [ 98.972995][T12117] __kmalloc_node_track_caller+0xd7b/0x1390 [ 98.978896][T12117] __alloc_skb+0x306/0xa10 [ 98.983308][T12117] alloc_skb_with_frags+0x18c/0xa80 [ 98.988494][T12117] sock_alloc_send_pskb+0xafd/0x10a0 [ 98.993764][T12117] packet_sendmsg+0x6785/0x92e0 [ 98.998601][T12117] ___sys_sendmsg+0x14ff/0x1590 [ 99.003447][T12117] __se_sys_sendmsg+0x305/0x460 [ 99.008282][T12117] __x64_sys_sendmsg+0x4a/0x70 [ 99.013033][T12117] do_syscall_64+0xb6/0x160 [ 99.017521][T12117] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 99.023393][T12117] ===================================================== [ 99.030308][T12117] Disabling lock debugging due to kernel taint [ 99.036468][T12120] ===================================================== [ 99.036471][T12117] Kernel panic - not syncing: panic_on_warn set ... [ 99.036491][T12117] CPU: 0 PID: 12117 Comm: syz-executor070 Tainted: G B 5.4.0-rc5+ #0 [ 99.043413][T12120] BUG: KMSAN: uninit-value in ip_tunnel_xmit+0x3c6/0x3320 [ 99.049967][T12117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 99.076440][T12117] Call Trace: [ 99.079725][T12117] dump_stack+0x191/0x1f0 [ 99.084149][T12117] panic+0x3c9/0xc1e [ 99.088060][T12117] kmsan_report+0x215/0x220 [ 99.092560][T12117] __msan_warning+0x73/0xe0 [ 99.097056][T12117] ip_tunnel_xmit+0x3c6/0x3320 [ 99.101901][T12117] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 99.107969][T12117] ? skb_push+0x15b/0x250 [ 99.112302][T12117] ? gre_build_header+0x3ec/0x9f0 [ 99.117338][T12117] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 99.123254][T12117] ipgre_xmit+0xff3/0x1120 [ 99.127682][T12117] ? ipgre_close+0x240/0x240 [ 99.132265][T12117] dev_hard_start_xmit+0x51a/0xab0 [ 99.137383][T12117] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 99.143272][T12117] __dev_queue_xmit+0x35b6/0x4200 [ 99.148309][T12117] dev_queue_xmit+0x4b/0x60 [ 99.152815][T12117] ? netdev_core_pick_tx+0x4d0/0x4d0 [ 99.158102][T12117] packet_sendmsg+0x82d7/0x92e0 [ 99.162945][T12117] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 99.169006][T12117] ? aa_label_sk_perm+0x6d6/0x940 [ 99.174036][T12117] ? kmsan_get_metadata+0x39/0x350 [ 99.179228][T12117] ? kmsan_internal_set_origin+0x6a/0xb0 [ 99.184853][T12117] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 99.190739][T12117] ? aa_sk_perm+0x730/0xaf0 [ 99.195264][T12117] ? compat_packet_setsockopt+0x360/0x360 [ 99.200970][T12117] ___sys_sendmsg+0x14ff/0x1590 [ 99.205851][T12117] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 99.211738][T12117] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 99.217790][T12117] ? __fget_light+0x1b8/0x710 [ 99.222487][T12117] __se_sys_sendmsg+0x305/0x460 [ 99.227339][T12117] __x64_sys_sendmsg+0x4a/0x70 [ 99.232092][T12117] do_syscall_64+0xb6/0x160 [ 99.236585][T12117] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 99.242551][T12117] RIP: 0033:0x4425d9 [ 99.246436][T12117] Code: e8 0c e8 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 6b 09 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 99.266123][T12117] RSP: 002b:00007ffe4a75c348 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.274522][T12117] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004425d9 [ 99.282482][T12117] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 99.290542][T12117] RBP: 0000000000000003 R08: 0000000000000025 R09: 0000000000000025 [ 99.298511][T12117] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000013 [ 99.306470][T12117] R13: 0000000000403460 R14: 0000000000000000 R15: 0000000000000000 [ 99.314565][T12120] CPU: 1 PID: 12120 Comm: syz-executor070 Tainted: G B 5.4.0-rc5+ #0 [ 99.323920][T12120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 99.334045][T12120] Call Trace: [ 99.337327][T12120] dump_stack+0x191/0x1f0 [ 99.341651][T12120] kmsan_report+0x128/0x220 [ 99.346149][T12120] __msan_warning+0x73/0xe0 [ 99.350645][T12120] ip_tunnel_xmit+0x3c6/0x3320 [ 99.355402][T12120] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 99.361479][T12120] ? skb_push+0x15b/0x250 [ 99.365805][T12120] ? gre_build_header+0x3ec/0x9f0 [ 99.370826][T12120] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 99.376724][T12120] ipgre_xmit+0xff3/0x1120 [ 99.381146][T12120] ? ipgre_close+0x240/0x240 [ 99.385726][T12120] dev_hard_start_xmit+0x51a/0xab0 [ 99.390851][T12120] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 99.396745][T12120] __dev_queue_xmit+0x35b6/0x4200 [ 99.401795][T12120] dev_queue_xmit+0x4b/0x60 [ 99.406283][T12120] ? netdev_core_pick_tx+0x4d0/0x4d0 [ 99.411559][T12120] packet_sendmsg+0x82d7/0x92e0 [ 99.416399][T12120] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 99.422452][T12120] ? aa_label_sk_perm+0x6d6/0x940 [ 99.427476][T12120] ? kmsan_get_metadata+0x39/0x350 [ 99.432587][T12120] ? kmsan_internal_set_origin+0x6a/0xb0 [ 99.438223][T12120] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 99.444124][T12120] ? aa_sk_perm+0x730/0xaf0 [ 99.448658][T12120] ? compat_packet_setsockopt+0x360/0x360 [ 99.454366][T12120] ___sys_sendmsg+0x14ff/0x1590 [ 99.459237][T12120] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 99.465122][T12120] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 99.471176][T12120] ? __fget_light+0x1b8/0x710 [ 99.475855][T12120] __se_sys_sendmsg+0x305/0x460 [ 99.480709][T12120] __x64_sys_sendmsg+0x4a/0x70 [ 99.485461][T12120] do_syscall_64+0xb6/0x160 [ 99.489973][T12120] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 99.495850][T12120] RIP: 0033:0x4425d9 [ 99.499732][T12120] Code: e8 0c e8 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 6b 09 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 99.519324][T12120] RSP: 002b:00007ffe4a75c348 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.527720][T12120] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004425d9 [ 99.535691][T12120] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 99.543647][T12120] RBP: 0000000000000003 R08: 0000000000000025 R09: 0000000000000025 [ 99.551617][T12120] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000013 [ 99.559575][T12120] R13: 0000000000403460 R14: 0000000000000000 R15: 0000000000000000 [ 99.567545][T12120] [ 99.569856][T12120] Uninit was created at: [ 99.574088][T12120] kmsan_internal_poison_shadow+0x60/0x120 [ 99.579882][T12120] kmsan_slab_alloc+0xaa/0x120 [ 99.585065][T12120] __kmalloc_node_track_caller+0xd7b/0x1390 [ 99.591034][T12120] __alloc_skb+0x306/0xa10 [ 99.595435][T12120] alloc_skb_with_frags+0x18c/0xa80 [ 99.600633][T12120] sock_alloc_send_pskb+0xafd/0x10a0 [ 99.605901][T12120] packet_sendmsg+0x6785/0x92e0 [ 99.610734][T12120] ___sys_sendmsg+0x14ff/0x1590 [ 99.615571][T12120] __se_sys_sendmsg+0x305/0x460 [ 99.620420][T12120] __x64_sys_sendmsg+0x4a/0x70 [ 99.625183][T12120] do_syscall_64+0xb6/0x160 [ 99.629673][T12120] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 99.635544][T12120] ===================================================== [ 100.528206][T12117] Shutting down cpus with NMI [ 100.546323][T12117] Kernel Offset: disabled [ 100.550661][T12117] Rebooting in 86400 seconds..