[ OK ] Started System Logging Service. [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. [ *] A start job is running for OpenBSD …Shell server (1min 21s / 2min 41s)[ **] A start job is running for OpenBSD …Shell server (1min 22s / 2min 41s)[ ***] A start job is running for OpenBSD …Shell server (1min 23s / 2min 41s)[ *** ] A start job is running for OpenBSD …Shell server (1min 23s / 2min 41s)[ *** ] A start job is running for OpenBSD …Shell server (1min 24s / 2min 41s)[*** ] A start job is running for OpenBSD …Shell server (1min 25s / 2min 41s)[** ] A start job is running for OpenBSD …Shell server (1min 26s / 2min 55s)[ OK ] Started OpenBSD Secure Shell server. [ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Started Getty on tty6. [ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.123' (ECDSA) to the list of known hosts. syzkaller login: [ 135.390872][ T8221] IPVS: ftp: loaded support on port[0] = 21 [ 135.557091][ T8221] chnl_net:caif_netlink_parms(): no params data found [ 135.641387][ T8221] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.648760][ T8221] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.658104][ T8221] device bridge_slave_0 entered promiscuous mode [ 135.668353][ T8221] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.675774][ T8221] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.685037][ T8221] device bridge_slave_1 entered promiscuous mode [ 135.717936][ T8221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.731530][ T8221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.765489][ T8221] team0: Port device team_slave_0 added [ 135.776314][ T8221] team0: Port device team_slave_1 added [ 135.807027][ T8221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.815007][ T8221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.841569][ T8221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.855227][ T8221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.863300][ T8221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.890167][ T8221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.930927][ T8221] device hsr_slave_0 entered promiscuous mode [ 135.938369][ T8221] device hsr_slave_1 entered promiscuous mode [ 136.121369][ T8221] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 136.151189][ T8221] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 136.182507][ T8221] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 136.224662][ T8221] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 136.340805][ T8221] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.348050][ T8221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.355992][ T8221] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.363526][ T8221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.439728][ T8221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.460227][ T1982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 136.470799][ T1982] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.481103][ T1982] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.491544][ T1982] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 136.510437][ T8221] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.525993][ T3454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 136.535686][ T3454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 136.545344][ T3454] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.552879][ T3454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.567782][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 136.577693][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 136.587370][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.594834][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.610286][ T3454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 136.625459][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 136.645475][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 136.656384][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 136.670627][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 136.685234][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 136.695751][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 136.722436][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 136.731535][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 136.741785][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 136.751489][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 136.763337][ T8221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 136.795121][ T3454] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 136.803077][ T3454] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 136.824112][ T8221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.863134][ T3454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 136.872927][ T3454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 136.898801][ T3454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 136.908538][ T3454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 136.921603][ T3454] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 136.930687][ T3454] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 136.943375][ T8221] device veth0_vlan entered promiscuous mode [ 136.961746][ T8221] device veth1_vlan entered promiscuous mode [ 137.000980][ T3454] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 137.010197][ T3454] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 137.019530][ T3454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 137.029028][ T3454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 137.047027][ T8221] device veth0_macvtap entered promiscuous mode [ 137.060213][ T8221] device veth1_macvtap entered promiscuous mode [ 137.092272][ T8221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.099793][ T3454] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 137.109866][ T3454] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 137.119356][ T3454] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 137.129094][ T3454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 137.148435][ T8221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.156102][ T3454] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 137.166182][ T3454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 137.182601][ T8221] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.191500][ T8221] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.200471][ T8221] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.209466][ T8221] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 executing program [ 137.359450][ C0] ===================================================== [ 137.367114][ C0] BUG: KMSAN: uninit-value in ip_rcv_core+0xf4c/0x1480 [ 137.374005][ C0] CPU: 0 PID: 8434 Comm: syz-executor219 Not tainted 5.12.0-rc6-syzkaller #0 [ 137.383214][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 137.393290][ C0] Call Trace: [ 137.396570][ C0] [ 137.399418][ C0] dump_stack+0x24c/0x2e0 [ 137.403763][ C0] kmsan_report+0xfb/0x1e0 [ 137.408225][ C0] __msan_warning+0x5c/0xa0 [ 137.412714][ C0] ip_rcv_core+0xf4c/0x1480 [ 137.417207][ C0] ip_rcv+0xc7/0x820 [ 137.421096][ C0] ? kmsan_get_metadata+0x116/0x180 [ 137.426406][ C0] __netif_receive_skb+0x1ec/0x640 [ 137.431594][ C0] ? kmsan_set_origin_checked+0xa2/0x100 [ 137.437226][ C0] ? ip_local_deliver_finish+0x370/0x370 [ 137.442878][ C0] process_backlog+0x517/0xbd0 [ 137.447664][ C0] ? swake_up_one+0x2a2/0x390 [ 137.452334][ C0] ? rps_trigger_softirq+0x4d0/0x4d0 [ 137.457604][ C0] __napi_poll+0x13e/0xca0 [ 137.462011][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 137.468109][ C0] net_rx_action+0x726/0x14a0 [ 137.472796][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 137.478725][ C0] ? net_tx_action+0xd30/0xd30 [ 137.483509][ C0] __do_softirq+0x1b9/0x715 [ 137.488004][ C0] ? idle_cpu+0x9a/0x1d0 [ 137.492252][ C0] ? __irq_exit_rcu+0x83/0x280 [ 137.497051][ C0] do_softirq+0x123/0x1c0 [ 137.501379][ C0] [ 137.504312][ C0] __local_bh_enable_ip+0xa1/0xb0 [ 137.509442][ C0] local_bh_enable+0x36/0x40 [ 137.514040][ C0] __dev_queue_xmit+0x3b4a/0x4600 [ 137.519062][ C0] dev_queue_xmit+0x4b/0x60 [ 137.523561][ C0] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 137.528840][ C0] packet_sendmsg+0x86ee/0x99d0 [ 137.533714][ C0] ? kmsan_get_metadata+0x116/0x180 [ 137.538929][ C0] ? kmsan_internal_set_origin+0x82/0xc0 [ 137.544551][ C0] ? process_slab+0x13a8/0x1b70 [ 137.549418][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 137.555229][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 137.561319][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 137.566250][ C0] ? packet_getsockopt+0x1120/0x1120 [ 137.571526][ C0] __sys_sendmsg+0x714/0x830 [ 137.576107][ C0] ? __msan_instrument_asm_store+0x105/0x130 [ 137.582074][ C0] ? up_read+0x40/0x2b0 [ 137.586219][ C0] ? kmsan_get_metadata+0x116/0x180 [ 137.591403][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 137.597198][ C0] ? kmsan_get_metadata+0x116/0x180 [ 137.602383][ C0] __se_sys_sendmsg+0x97/0xb0 [ 137.607050][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 137.611820][ C0] do_syscall_64+0x9f/0x140 [ 137.616327][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 137.622227][ C0] RIP: 0033:0x443df9 [ 137.626147][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 137.646286][ C0] RSP: 002b:00007ffc8f7117b8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 137.654775][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443df9 [ 137.662739][ C0] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 137.670813][ C0] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 137.678784][ C0] R10: 00007ffc8f711230 R11: 0000000000000246 R12: 00007ffc8f7117f0 [ 137.686775][ C0] R13: 00007ffc8f7117e0 R14: 00007ffc8f7117d0 R15: 0000000000000003 [ 137.694769][ C0] [ 137.697097][ C0] Uninit was stored to memory at: [ 137.702144][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 137.707853][ C0] __msan_chain_origin+0x54/0xa0 [ 137.712794][ C0] iptunnel_xmit+0xbd6/0xf20 [ 137.717388][ C0] udp_tunnel_xmit_skb+0x526/0x640 [ 137.722494][ C0] geneve_xmit+0x2139/0x3c40 [ 137.727072][ C0] xmit_one+0x2b6/0x760 [ 137.731208][ C0] __dev_queue_xmit+0x3432/0x4600 [ 137.736223][ C0] dev_queue_xmit+0x4b/0x60 [ 137.740708][ C0] packet_sendmsg+0x86ee/0x99d0 [ 137.745542][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 137.750382][ C0] __sys_sendmsg+0x714/0x830 [ 137.754955][ C0] __se_sys_sendmsg+0x97/0xb0 [ 137.759615][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 137.764361][ C0] do_syscall_64+0x9f/0x140 [ 137.768874][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 137.774751][ C0] [ 137.777069][ C0] Uninit was created at: [ 137.781293][ C0] kmsan_internal_poison_shadow+0x66/0xd0 [ 137.787000][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 137.791657][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 137.797556][ C0] __alloc_skb+0x4dd/0xe90 [ 137.801983][ C0] alloc_skb_with_frags+0x1f3/0xc10 [ 137.807192][ C0] sock_alloc_send_pskb+0xdc1/0xf90 [ 137.812378][ C0] packet_sendmsg+0x6a12/0x99d0 [ 137.817255][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 137.822115][ C0] __sys_sendmsg+0x714/0x830 [ 137.826688][ C0] __se_sys_sendmsg+0x97/0xb0 [ 137.831346][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 137.836091][ C0] do_syscall_64+0x9f/0x140 [ 137.840596][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 137.846474][ C0] ===================================================== [ 137.853402][ C0] Disabling lock debugging due to kernel taint [ 137.859537][ C0] Kernel panic - not syncing: panic_on_kmsan set ... [ 137.866184][ C0] CPU: 0 PID: 8434 Comm: syz-executor219 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 137.876421][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 137.886466][ C0] Call Trace: [ 137.889727][ C0] [ 137.892551][ C0] dump_stack+0x24c/0x2e0 [ 137.896877][ C0] panic+0x4c6/0xea7 [ 137.900813][ C0] ? add_taint+0x17c/0x210 [ 137.905226][ C0] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 137.911378][ C0] kmsan_report+0x1de/0x1e0 [ 137.915872][ C0] __msan_warning+0x5c/0xa0 [ 137.920358][ C0] ip_rcv_core+0xf4c/0x1480 [ 137.924877][ C0] ip_rcv+0xc7/0x820 [ 137.929125][ C0] ? kmsan_get_metadata+0x116/0x180 [ 137.934307][ C0] __netif_receive_skb+0x1ec/0x640 [ 137.939414][ C0] ? kmsan_set_origin_checked+0xa2/0x100 [ 137.945033][ C0] ? ip_local_deliver_finish+0x370/0x370 [ 137.950671][ C0] process_backlog+0x517/0xbd0 [ 137.955469][ C0] ? swake_up_one+0x2a2/0x390 [ 137.960135][ C0] ? rps_trigger_softirq+0x4d0/0x4d0 [ 137.965421][ C0] __napi_poll+0x13e/0xca0 [ 137.969930][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 137.975988][ C0] net_rx_action+0x726/0x14a0 [ 137.980664][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 137.986510][ C0] ? net_tx_action+0xd30/0xd30 [ 137.991256][ C0] __do_softirq+0x1b9/0x715 [ 137.995742][ C0] ? idle_cpu+0x9a/0x1d0 [ 137.999967][ C0] ? __irq_exit_rcu+0x83/0x280 [ 138.004716][ C0] do_softirq+0x123/0x1c0 [ 138.009060][ C0] [ 138.012256][ C0] __local_bh_enable_ip+0xa1/0xb0 [ 138.017317][ C0] local_bh_enable+0x36/0x40 [ 138.022152][ C0] __dev_queue_xmit+0x3b4a/0x4600 [ 138.027173][ C0] dev_queue_xmit+0x4b/0x60 [ 138.031705][ C0] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 138.037000][ C0] packet_sendmsg+0x86ee/0x99d0 [ 138.041847][ C0] ? kmsan_get_metadata+0x116/0x180 [ 138.047027][ C0] ? kmsan_internal_set_origin+0x82/0xc0 [ 138.052655][ C0] ? process_slab+0x13a8/0x1b70 [ 138.057493][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 138.063287][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 138.069353][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 138.074542][ C0] ? packet_getsockopt+0x1120/0x1120 [ 138.079816][ C0] __sys_sendmsg+0x714/0x830 [ 138.084435][ C0] ? __msan_instrument_asm_store+0x105/0x130 [ 138.090445][ C0] ? up_read+0x40/0x2b0 [ 138.094593][ C0] ? kmsan_get_metadata+0x116/0x180 [ 138.099814][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 138.105615][ C0] ? kmsan_get_metadata+0x116/0x180 [ 138.110895][ C0] __se_sys_sendmsg+0x97/0xb0 [ 138.115651][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 138.120411][ C0] do_syscall_64+0x9f/0x140 [ 138.124993][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 138.130988][ C0] RIP: 0033:0x443df9 [ 138.134877][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 138.154498][ C0] RSP: 002b:00007ffc8f7117b8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.162899][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443df9 [ 138.170889][ C0] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 138.179194][ C0] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 138.187250][ C0] R10: 00007ffc8f711230 R11: 0000000000000246 R12: 00007ffc8f7117f0 [ 138.195211][ C0] R13: 00007ffc8f7117e0 R14: 00007ffc8f7117d0 R15: 0000000000000003 [ 138.204974][ C0] Kernel Offset: disabled [ 138.209321][ C0] Rebooting in 86400 seconds..