INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.3' (ECDSA) to the list of known hosts. net.ipv6.conf.syz_tun.accept_dad = 0 syzkaller login: [ 380.299149] IPVS: ftp: loaded support on port[0] = 21 net.ipv6.conf.syz_tun.router_solicitations = 0 [ 380.539729] ip (4547) used greatest stack depth: 54296 bytes left [ 380.588706] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.595169] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.602391] device bridge_slave_0 entered promiscuous mode [ 380.623980] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.631128] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.638418] device bridge_slave_1 entered promiscuous mode [ 380.659299] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 380.680704] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 380.744769] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 380.770539] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 380.836842] ip (4577) used greatest stack depth: 53992 bytes left [ 380.871859] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 380.879195] team0: Port device team_slave_0 added [ 380.899595] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 380.906831] team0: Port device team_slave_1 added [ 380.927308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 380.942935] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 380.966907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 380.990132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready RTNETLINK answers: Operation not supported RTNETLINK answers: No buffer space available RTNETLINK answers: Operation not supported [ 381.168369] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.174803] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.181537] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.187923] bridge0: port 1(bridge_slave_0) entered forwarding state RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument [ 381.850151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.914545] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 381.978222] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 381.984427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 381.993427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 382.050574] 8021q: adding VLAN 0 to HW filter on device team0 executing program executing program executing program [ 382.555646] ================================================================== [ 382.563133] BUG: KMSAN: uninit-value in __kmalloc_node_track_caller+0xe5a/0x11c0 [ 382.570670] CPU: 1 PID: 4779 Comm: syz-executor072 Not tainted 4.16.0+ #87 [ 382.577655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 382.586982] Call Trace: [ 382.589583] dump_stack+0x185/0x1d0 [ 382.593189] ? __kmalloc_node_track_caller+0xe5a/0x11c0 [ 382.598533] kmsan_report+0x142/0x240 [ 382.602311] __msan_warning_32+0x6c/0xb0 [ 382.606348] __kmalloc_node_track_caller+0xe5a/0x11c0 [ 382.611552] ? alloc_skb_with_frags+0x1d4/0xb20 [ 382.616198] __alloc_skb+0x2cf/0x9f0 [ 382.619898] ? alloc_skb_with_frags+0x1d4/0xb20 [ 382.624545] alloc_skb_with_frags+0x1d4/0xb20 [ 382.629015] ? kmsan_set_origin_inline+0x6b/0x120 [ 382.633862] ? packet_sendmsg+0x6454/0x8a30 [ 382.638167] sock_alloc_send_pskb+0xb56/0x1190 [ 382.642724] ? kmsan_set_origin+0x9e/0x160 [ 382.646935] packet_sendmsg+0x6454/0x8a30 [ 382.651058] ? kmsan_set_origin_inline+0x6b/0x120 [ 382.655883] ? __msan_poison_alloca+0x15c/0x1d0 [ 382.660526] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 382.665952] ? rw_copy_check_uvector+0x643/0x6c0 [ 382.670682] ? __msan_poison_alloca+0x15c/0x1d0 [ 382.675328] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 382.680782] ? import_iovec+0x3cd/0x610 [ 382.684754] ? copy_msghdr_from_user+0x72c/0x830 [ 382.689490] ? compat_packet_setsockopt+0x360/0x360 [ 382.694482] ___sys_sendmsg+0xec0/0x1310 [ 382.698521] ? kmsan_set_origin_inline+0x6b/0x120 [ 382.703338] ? __msan_poison_alloca+0x15c/0x1d0 [ 382.708007] ? _cond_resched+0x3c/0xd0 [ 382.711871] ? rcu_all_qs+0x32/0x1f0 [ 382.715560] ? _cond_resched+0x3c/0xd0 [ 382.719424] ? __sys_sendmmsg+0x5b8/0x800 [ 382.723545] ? rcu_all_qs+0x32/0x1f0 [ 382.727234] __sys_sendmmsg+0x42d/0x800 [ 382.731184] ? kmsan_set_origin_inline+0x6b/0x120 [ 382.736008] SYSC_sendmmsg+0xc4/0x110 [ 382.739785] SyS_sendmmsg+0x63/0x90 [ 382.743395] do_syscall_64+0x309/0x430 [ 382.747259] ? __sys_sendmmsg+0x800/0x800 [ 382.751408] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 382.756575] RIP: 0033:0x4426a9 [ 382.759740] RSP: 002b:00007fff4baaa818 EFLAGS: 00000217 ORIG_RAX: 0000000000000133 [ 382.767430] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004426a9 [ 382.774676] RDX: 0492492492492510 RSI: 0000000020871fc8 RDI: 0000000000000003 [ 382.781918] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 382.789164] R10: 0000000000000000 R11: 0000000000000217 R12: 000000000005d60b [ 382.796415] R13: 00000000006cf448 R14: 0000000000000000 R15: 0000000000000000 [ 382.803660] [ 382.805267] Uninit was created at: [ 382.808822] kmsan_internal_poison_shadow+0xb8/0x1b0 [ 382.813897] kmsan_kmalloc+0x94/0x100 [ 382.817670] kmsan_slab_alloc+0x11/0x20 [ 382.821619] __kmalloc_node_track_caller+0xaed/0x11c0 [ 382.826789] __alloc_skb+0x2cf/0x9f0 [ 382.830477] alloc_skb_with_frags+0x1d4/0xb20 [ 382.834945] sock_alloc_send_pskb+0xb56/0x1190 [ 382.839506] packet_sendmsg+0x6454/0x8a30 [ 382.843629] ___sys_sendmsg+0xec0/0x1310 [ 382.847663] __sys_sendmmsg+0x42d/0x800 [ 382.851608] SYSC_sendmmsg+0xc4/0x110 [ 382.855383] SyS_sendmmsg+0x63/0x90 [ 382.858983] do_syscall_64+0x309/0x430 [ 382.862843] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 382.868009] ================================================================== [ 382.875336] Disabling lock debugging due to kernel taint [ 382.880755] Kernel panic - not syncing: panic_on_warn set ... [ 382.880755] [ 382.888095] CPU: 1 PID: 4779 Comm: syz-executor072 Tainted: G B 4.16.0+ #87 [ 382.896379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 382.905706] Call Trace: [ 382.908269] dump_stack+0x185/0x1d0 [ 382.911871] panic+0x39d/0x940 [ 382.915056] ? __kmalloc_node_track_caller+0xe5a/0x11c0 [ 382.920392] kmsan_report+0x238/0x240 [ 382.924168] __msan_warning_32+0x6c/0xb0 [ 382.928204] __kmalloc_node_track_caller+0xe5a/0x11c0 [ 382.933372] ? alloc_skb_with_frags+0x1d4/0xb20 [ 382.938018] __alloc_skb+0x2cf/0x9f0 [ 382.941708] ? alloc_skb_with_frags+0x1d4/0xb20 [ 382.946359] alloc_skb_with_frags+0x1d4/0xb20 [ 382.950837] ? kmsan_set_origin_inline+0x6b/0x120 [ 382.955669] ? packet_sendmsg+0x6454/0x8a30 [ 382.959975] sock_alloc_send_pskb+0xb56/0x1190 [ 382.964567] ? kmsan_set_origin+0x9e/0x160 [ 382.968786] packet_sendmsg+0x6454/0x8a30 [ 382.972913] ? kmsan_set_origin_inline+0x6b/0x120 [ 382.977734] ? __msan_poison_alloca+0x15c/0x1d0 [ 382.982393] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 382.987850] ? rw_copy_check_uvector+0x643/0x6c0 [ 382.992586] ? __msan_poison_alloca+0x15c/0x1d0 [ 382.997242] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 383.002671] ? import_iovec+0x3cd/0x610 [ 383.006627] ? copy_msghdr_from_user+0x72c/0x830 [ 383.011366] ? compat_packet_setsockopt+0x360/0x360 [ 383.016363] ___sys_sendmsg+0xec0/0x1310 [ 383.020409] ? kmsan_set_origin_inline+0x6b/0x120 [ 383.025232] ? __msan_poison_alloca+0x15c/0x1d0 [ 383.029887] ? _cond_resched+0x3c/0xd0 [ 383.033755] ? rcu_all_qs+0x32/0x1f0 [ 383.037446] ? _cond_resched+0x3c/0xd0 [ 383.041312] ? __sys_sendmmsg+0x5b8/0x800 [ 383.045437] ? rcu_all_qs+0x32/0x1f0 [ 383.049133] __sys_sendmmsg+0x42d/0x800 [ 383.053087] ? kmsan_set_origin_inline+0x6b/0x120 [ 383.057919] SYSC_sendmmsg+0xc4/0x110 [ 383.061705] SyS_sendmmsg+0x63/0x90 [ 383.065311] do_syscall_64+0x309/0x430 [ 383.069176] ? __sys_sendmmsg+0x800/0x800 [ 383.073303] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 383.078469] RIP: 0033:0x4426a9 [ 383.081633] RSP: 002b:00007fff4baaa818 EFLAGS: 00000217 ORIG_RAX: 0000000000000133 [ 383.089315] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004426a9 [ 383.096562] RDX: 0492492492492510 RSI: 0000000020871fc8 RDI: 0000000000000003 [ 383.103810] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 383.111059] R10: 0000000000000000 R11: 0000000000000217 R12: 000000000005d60b [ 383.118305] R13: 00000000006cf448 R14: 0000000000000000 R15: 0000000000000000 [ 383.126099] Dumping ftrace buffer: [ 383.129621] (ftrace buffer empty) [ 383.133304] Kernel Offset: disabled [ 383.136907] Rebooting in 86400 seconds..