[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 95.016921][ T30] audit: type=1800 audit(1562662708.063:25): pid=12268 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 95.041755][ T30] audit: type=1800 audit(1562662708.093:26): pid=12268 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 95.079047][ T30] audit: type=1800 audit(1562662708.113:27): pid=12268 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.30' (ECDSA) to the list of known hosts. syzkaller login: [ 106.303492][T12422] IPVS: ftp: loaded support on port[0] = 21 [ 106.381119][T12422] chnl_net:caif_netlink_parms(): no params data found [ 106.418047][T12422] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.425396][T12422] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.434039][T12422] device bridge_slave_0 entered promiscuous mode [ 106.442478][T12422] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.449642][T12422] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.458139][T12422] device bridge_slave_1 entered promiscuous mode [ 106.480375][T12422] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 106.490872][T12422] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 106.514039][T12422] team0: Port device team_slave_0 added [ 106.521891][T12422] team0: Port device team_slave_1 added [ 106.585429][T12422] device hsr_slave_0 entered promiscuous mode [ 106.633058][T12422] device hsr_slave_1 entered promiscuous mode [ 106.715473][T12422] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.722758][T12422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.730237][T12422] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.737709][T12422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.789289][T12422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.804324][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 106.814026][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.822606][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.831262][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 106.846002][T12422] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.858573][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 106.867523][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.874701][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.904383][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.913533][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.920774][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.930055][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 106.939279][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 106.954799][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 106.963735][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 106.979759][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 106.991295][T12422] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready executing program [ 107.019855][T12422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.071925][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 107.085382][ C0] ================================================================== [ 107.093470][ C0] BUG: KMSAN: uninit-value in tcp_create_openreq_child+0x157f/0x1cc0 [ 107.101526][ C0] CPU: 0 PID: 12422 Comm: syz-executor240 Not tainted 5.2.0-rc4+ #10 [ 107.109576][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 107.119622][ C0] Call Trace: [ 107.122903][ C0] [ 107.125756][ C0] dump_stack+0x191/0x1f0 [ 107.130093][ C0] kmsan_report+0x162/0x2d0 [ 107.134813][ C0] __msan_warning+0x75/0xe0 [ 107.139377][ C0] tcp_create_openreq_child+0x157f/0x1cc0 [ 107.145160][ C0] tcp_v6_syn_recv_sock+0x761/0x2d80 [ 107.150465][ C0] ? __msan_poison_alloca+0x1c0/0x270 [ 107.155833][ C0] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 107.161718][ C0] ? cookie_v6_check+0x27e0/0x29a0 [ 107.166828][ C0] ? tcp_v6_conn_request+0x2d0/0x2d0 [ 107.172105][ C0] tcp_get_cookie_sock+0x16e/0x6b0 [ 107.177225][ C0] cookie_v6_check+0x27e0/0x29a0 [ 107.182198][ C0] tcp_v6_do_rcv+0xf1c/0x1ce0 [ 107.186924][ C0] ? kmsan_memcpy_memmove_metadata+0x8bc/0xe00 [ 107.193087][ C0] tcp_v6_rcv+0x60b7/0x6a30 [ 107.197643][ C0] ip6_protocol_deliver_rcu+0x1433/0x22f0 [ 107.203404][ C0] ip6_input+0x2af/0x340 [ 107.207650][ C0] ? ip6_input+0x340/0x340 [ 107.212104][ C0] ? ip6_protocol_deliver_rcu+0x22f0/0x22f0 [ 107.217988][ C0] ipv6_rcv+0x683/0x710 [ 107.222195][ C0] ? local_bh_enable+0x40/0x40 [ 107.227000][ C0] process_backlog+0x721/0x1410 [ 107.231855][ C0] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 107.237746][ C0] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 107.243638][ C0] ? rps_trigger_softirq+0x2e0/0x2e0 [ 107.248912][ C0] net_rx_action+0x738/0x1940 [ 107.253650][ C0] ? net_tx_action+0xb70/0xb70 [ 107.258412][ C0] __do_softirq+0x4ad/0x858 [ 107.262973][ C0] do_softirq_own_stack+0x49/0x80 [ 107.267981][ C0] [ 107.270913][ C0] __local_bh_enable_ip+0x199/0x1e0 [ 107.276111][ C0] local_bh_enable+0x36/0x40 [ 107.280694][ C0] ip6_finish_output2+0x213f/0x2670 [ 107.285921][ C0] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 107.291811][ C0] ip6_finish_output+0xae4/0xbc0 [ 107.296760][ C0] ip6_output+0x5d3/0x720 [ 107.301096][ C0] ? ip6_output+0x720/0x720 [ 107.305594][ C0] ? ac6_seq_show+0x200/0x200 [ 107.310264][ C0] ip6_xmit+0x1f53/0x2650 [ 107.314618][ C0] ? ip6_xmit+0x2650/0x2650 [ 107.319122][ C0] inet6_csk_xmit+0x3df/0x4f0 [ 107.323814][ C0] ? inet6_csk_addr2sockaddr+0x2c0/0x2c0 [ 107.329440][ C0] __tcp_transmit_skb+0x4076/0x5b40 [ 107.334673][ C0] tcp_write_xmit+0x39a9/0xa730 [ 107.339577][ C0] ? kmsan_get_shadow_origin_ptr+0x20/0x470 [ 107.345479][ C0] __tcp_push_pending_frames+0x124/0x4e0 [ 107.351112][ C0] tcp_send_fin+0xd43/0x1540 [ 107.355719][ C0] tcp_close+0x16ba/0x1860 [ 107.360131][ C0] ? ip_mc_drop_socket+0x69b/0x6e0 [ 107.365275][ C0] ? kmsan_internal_memset_shadow+0x104/0x3a0 [ 107.371344][ C0] ? tcp_check_oom+0x530/0x530 [ 107.376104][ C0] inet_release+0x1f7/0x270 [ 107.380611][ C0] inet6_release+0xaf/0x100 [ 107.385157][ C0] sock_close+0x156/0x490 [ 107.389486][ C0] ? __inet6_bind+0x1b70/0x1b70 [ 107.394334][ C0] ? sock_mmap+0x130/0x130 [ 107.398740][ C0] __fput+0x4c9/0xba0 [ 107.402729][ C0] ____fput+0x37/0x40 [ 107.406703][ C0] ? fput_many+0x2a0/0x2a0 [ 107.411115][ C0] task_work_run+0x22e/0x2a0 [ 107.415709][ C0] prepare_exit_to_usermode+0x39d/0x4d0 [ 107.421253][ C0] syscall_return_slowpath+0x90/0x5c0 [ 107.426738][ C0] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 107.432633][ C0] do_syscall_64+0xe2/0xf0 [ 107.437046][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 107.442931][ C0] RIP: 0033:0x401d50 [ 107.446858][ C0] Code: 01 f0 ff ff 0f 83 40 0d 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 83 3d dd 8d 2d 00 00 75 14 b8 03 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 14 0d 00 00 c3 48 83 ec 08 e8 7a 02 00 00 [ 107.466454][ C0] RSP: 002b:00007ffdb6549408 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 107.474858][ C0] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000401d50 [ 107.482993][ C0] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000003 [ 107.490955][ C0] RBP: 00000000004a9050 R08: 0000000020000040 R09: 000000000000001c [ 107.498915][ C0] R10: 0000000020004004 R11: 0000000000000246 R12: 0000000000402ef0 [ 107.506878][ C0] R13: 0000000000402f80 R14: 0000000000000000 R15: 0000000000000000 [ 107.514907][ C0] [ 107.517224][ C0] Uninit was created at: [ 107.521462][ C0] kmsan_internal_poison_shadow+0x53/0xa0 [ 107.527173][ C0] kmsan_kmalloc+0xa4/0x130 [ 107.531662][ C0] kmem_cache_alloc+0x534/0xb00 [ 107.536500][ C0] inet_reqsk_alloc+0xa8/0x600 [ 107.541254][ C0] cookie_v6_check+0xadb/0x29a0 [ 107.546093][ C0] tcp_v6_do_rcv+0xf1c/0x1ce0 [ 107.550756][ C0] tcp_v6_rcv+0x60b7/0x6a30 [ 107.555253][ C0] ip6_protocol_deliver_rcu+0x1433/0x22f0 [ 107.560958][ C0] ip6_input+0x2af/0x340 [ 107.565190][ C0] ipv6_rcv+0x683/0x710 [ 107.569377][ C0] process_backlog+0x721/0x1410 [ 107.574218][ C0] net_rx_action+0x738/0x1940 [ 107.578883][ C0] __do_softirq+0x4ad/0x858 [ 107.583380][ C0] do_softirq_own_stack+0x49/0x80 [ 107.588395][ C0] __local_bh_enable_ip+0x199/0x1e0 [ 107.593582][ C0] local_bh_enable+0x36/0x40 [ 107.598162][ C0] ip6_finish_output2+0x213f/0x2670 [ 107.603351][ C0] ip6_finish_output+0xae4/0xbc0 [ 107.608277][ C0] ip6_output+0x5d3/0x720 [ 107.612637][ C0] ip6_xmit+0x1f53/0x2650 [ 107.616959][ C0] inet6_csk_xmit+0x3df/0x4f0 [ 107.621628][ C0] __tcp_transmit_skb+0x4076/0x5b40 [ 107.626833][ C0] tcp_write_xmit+0x39a9/0xa730 [ 107.631726][ C0] __tcp_push_pending_frames+0x124/0x4e0 [ 107.637346][ C0] tcp_send_fin+0xd43/0x1540 [ 107.641927][ C0] tcp_close+0x16ba/0x1860 [ 107.646373][ C0] inet_release+0x1f7/0x270 [ 107.650869][ C0] inet6_release+0xaf/0x100 [ 107.655369][ C0] sock_close+0x156/0x490 [ 107.659689][ C0] __fput+0x4c9/0xba0 [ 107.663659][ C0] ____fput+0x37/0x40 [ 107.667633][ C0] task_work_run+0x22e/0x2a0 [ 107.672211][ C0] prepare_exit_to_usermode+0x39d/0x4d0 [ 107.677742][ C0] syscall_return_slowpath+0x90/0x5c0 [ 107.683100][ C0] do_syscall_64+0xe2/0xf0 [ 107.687509][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 107.693385][ C0] ================================================================== [ 107.703340][ C0] Disabling lock debugging due to kernel taint [ 107.709482][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 107.716061][ C0] CPU: 0 PID: 12422 Comm: syz-executor240 Tainted: G B 5.2.0-rc4+ #10 [ 107.725496][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 107.735539][ C0] Call Trace: [ 107.738813][ C0] [ 107.741667][ C0] dump_stack+0x191/0x1f0 [ 107.745999][ C0] panic+0x3c9/0xc1e [ 107.749925][ C0] kmsan_report+0x2ca/0x2d0 [ 107.754431][ C0] __msan_warning+0x75/0xe0 [ 107.758937][ C0] tcp_create_openreq_child+0x157f/0x1cc0 [ 107.764908][ C0] tcp_v6_syn_recv_sock+0x761/0x2d80 [ 107.770211][ C0] ? __msan_poison_alloca+0x1c0/0x270 [ 107.775581][ C0] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 107.781505][ C0] ? cookie_v6_check+0x27e0/0x29a0 [ 107.786613][ C0] ? tcp_v6_conn_request+0x2d0/0x2d0 [ 107.791936][ C0] tcp_get_cookie_sock+0x16e/0x6b0 [ 107.797054][ C0] cookie_v6_check+0x27e0/0x29a0 [ 107.802041][ C0] tcp_v6_do_rcv+0xf1c/0x1ce0 [ 107.806712][ C0] ? kmsan_memcpy_memmove_metadata+0x8bc/0xe00 [ 107.812890][ C0] tcp_v6_rcv+0x60b7/0x6a30 [ 107.817465][ C0] ip6_protocol_deliver_rcu+0x1433/0x22f0 [ 107.823219][ C0] ip6_input+0x2af/0x340 [ 107.827766][ C0] ? ip6_input+0x340/0x340 [ 107.832335][ C0] ? ip6_protocol_deliver_rcu+0x22f0/0x22f0 [ 107.838235][ C0] ipv6_rcv+0x683/0x710 [ 107.842411][ C0] ? local_bh_enable+0x40/0x40 [ 107.847179][ C0] process_backlog+0x721/0x1410 [ 107.852037][ C0] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 107.857930][ C0] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 107.863823][ C0] ? rps_trigger_softirq+0x2e0/0x2e0 [ 107.869146][ C0] net_rx_action+0x738/0x1940 [ 107.873842][ C0] ? net_tx_action+0xb70/0xb70 [ 107.878600][ C0] __do_softirq+0x4ad/0x858 [ 107.883153][ C0] do_softirq_own_stack+0x49/0x80 [ 107.888163][ C0] [ 107.891093][ C0] __local_bh_enable_ip+0x199/0x1e0 [ 107.896293][ C0] local_bh_enable+0x36/0x40 [ 107.900925][ C0] ip6_finish_output2+0x213f/0x2670 [ 107.906147][ C0] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 107.912082][ C0] ip6_finish_output+0xae4/0xbc0 [ 107.917040][ C0] ip6_output+0x5d3/0x720 [ 107.921371][ C0] ? ip6_output+0x720/0x720 [ 107.925870][ C0] ? ac6_seq_show+0x200/0x200 [ 107.930537][ C0] ip6_xmit+0x1f53/0x2650 [ 107.934887][ C0] ? ip6_xmit+0x2650/0x2650 [ 107.939407][ C0] inet6_csk_xmit+0x3df/0x4f0 [ 107.944099][ C0] ? inet6_csk_addr2sockaddr+0x2c0/0x2c0 [ 107.949728][ C0] __tcp_transmit_skb+0x4076/0x5b40 [ 107.954960][ C0] tcp_write_xmit+0x39a9/0xa730 [ 107.959873][ C0] ? kmsan_get_shadow_origin_ptr+0x20/0x470 [ 107.965776][ C0] __tcp_push_pending_frames+0x124/0x4e0 [ 107.971410][ C0] tcp_send_fin+0xd43/0x1540 [ 107.976014][ C0] tcp_close+0x16ba/0x1860 [ 107.980423][ C0] ? ip_mc_drop_socket+0x69b/0x6e0 [ 107.985593][ C0] ? kmsan_internal_memset_shadow+0x104/0x3a0 [ 107.991747][ C0] ? tcp_check_oom+0x530/0x530 [ 107.996505][ C0] inet_release+0x1f7/0x270 [ 108.001011][ C0] inet6_release+0xaf/0x100 [ 108.005516][ C0] sock_close+0x156/0x490 [ 108.009841][ C0] ? __inet6_bind+0x1b70/0x1b70 [ 108.014690][ C0] ? sock_mmap+0x130/0x130 [ 108.019177][ C0] __fput+0x4c9/0xba0 [ 108.023169][ C0] ____fput+0x37/0x40 [ 108.027142][ C0] ? fput_many+0x2a0/0x2a0 [ 108.031551][ C0] task_work_run+0x22e/0x2a0 [ 108.036147][ C0] prepare_exit_to_usermode+0x39d/0x4d0 [ 108.041692][ C0] syscall_return_slowpath+0x90/0x5c0 [ 108.047061][ C0] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 108.052950][ C0] do_syscall_64+0xe2/0xf0 [ 108.057362][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 108.063242][ C0] RIP: 0033:0x401d50 [ 108.067128][ C0] Code: 01 f0 ff ff 0f 83 40 0d 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 83 3d dd 8d 2d 00 00 75 14 b8 03 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 14 0d 00 00 c3 48 83 ec 08 e8 7a 02 00 00 [ 108.086724][ C0] RSP: 002b:00007ffdb6549408 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 108.095129][ C0] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000401d50 [ 108.103090][ C0] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000003 [ 108.111052][ C0] RBP: 00000000004a9050 R08: 0000000020000040 R09: 000000000000001c [ 108.119044][ C0] R10: 0000000020004004 R11: 0000000000000246 R12: 0000000000402ef0 [ 108.127003][ C0] R13: 0000000000402f80 R14: 0000000000000000 R15: 0000000000000000 [ 108.136236][ C0] Kernel Offset: disabled [ 108.140575][ C0] Rebooting in 86400 seconds..