Warning: Permanently added '10.128.0.9' (ECDSA) to the list of known hosts. [ 170.074375][ T29] audit: type=1400 audit(1597569274.790:8): avc: denied { execmem } for pid=8415 comm="syz-executor286" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 170.131779][ T8416] IPVS: ftp: loaded support on port[0] = 21 [ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ 170.374525][ T8416] chnl_net:caif_netlink_parms(): no params data found [ OK ] Started Getty on tty6. [ 170.519137][ T8416] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.527402][ T8416] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.537167][ T8416] device bridge_slave_0 entered promiscuous mode [ 170.551323][ T8416] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.558871][ T8416] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.568643][ T8416] device bridge_slave_1 entered promiscuous mode [ 170.625107][ T8416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.642914][ T8416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ OK ] Started Getty on tty5. [ 170.691365][ T8416] team0: Port device team_slave_0 added [ 170.705900][ T8416] team0: Port device team_slave_1 added [ 170.754823][ T8416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.762492][ T8416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.788608][ T8416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.808043][ T8416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.815173][ T8416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.841572][ T8416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ OK ] Started Getty on tty4. [ 170.888003][ T8416] device hsr_slave_0 entered promiscuous mode [ 170.896021][ T8416] device hsr_slave_1 entered promiscuous mode [ OK ] Started Getty on tty3. [ OK ] Started Serial Getty on ttyS0. [ 171.226998][ T8416] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 171.265033][ T8416] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 171.304360][ T8416] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 171.338626][ T8416] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ OK ] Started Getty on tty1. [ OK ] Started Getty on tty2. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ 171.638012][ T8416] 8021q: adding VLAN 0 to HW filter on device bond0 [ OK ] Reached target Graphical Interface. [ 171.675929][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 171.685560][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 171.708666][ T8416] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.733452][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 171.745009][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 171.754543][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.761842][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.773427][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 171.790265][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 171.800154][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 171.809906][ T4602] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.817254][ T4602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.866315][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 171.877948][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready Starting Update UTMP about System Runlevel Changes... [ 171.924270][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 171.935557][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 171.945967][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 171.956688][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 171.967236][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 171.977064][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 172.012784][ T8416] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 172.026721][ T8416] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 172.077514][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 172.087959][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 172.097846][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 172.134944][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 172.144030][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 172.168130][ T8416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.262506][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 172.272767][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 172.339750][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready Starting Load/Save RF Kill Switc[ 172.349906][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready h Status... [ 172.376096][ T8416] device veth0_vlan entered promiscuous mode [ 172.386733][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 172.395860][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 172.439361][ T8416] device veth1_vlan entered promiscuous mode [ 172.568755][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 172.579093][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 172.615978][ T8416] device veth0_macvtap entered promiscuous mode [ 172.667147][ T8416] device veth1_macvtap entered promiscuous mode [ 172.770774][ T8416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.778707][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 172.788528][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 172.798050][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 172.808227][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ OK ] Started Update UTMP about System Runlevel Changes. [ 172.879445][ T8416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.888270][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 172.898457][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ OK ] Started Load/Save RF Kill Switch Status. executing program [ 173.246001][ T8416] ===================================================== [ 173.246040][ T8416] BUG: KMSAN: uninit-value in eth_type_trans+0x655/0xc10 [ 173.246067][ T8416] CPU: 0 PID: 8416 Comm: syz-executor286 Not tainted 5.8.0-rc5-syzkaller #0 [ 173.246079][ T8416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 173.246089][ T8416] Call Trace: [ 173.246119][ T8416] dump_stack+0x21c/0x280 [ 173.246155][ T8416] kmsan_report+0xf7/0x1e0 [ 173.246188][ T8416] __msan_warning+0x58/0xa0 [ 173.246218][ T8416] eth_type_trans+0x655/0xc10 [ 173.246263][ T8416] __dev_forward_skb+0x4b0/0xb30 [ 173.246301][ T8416] veth_xmit+0x486/0xcf0 [ 173.246341][ T8416] ? veth_close+0x160/0x160 [ 173.246367][ T8416] xmit_one+0x3cf/0x750 [ 173.246396][ T8416] ? kmsan_get_metadata+0x116/0x180 [ 173.246429][ T8416] __dev_queue_xmit+0x3aad/0x4470 [ 173.246492][ T8416] dev_queue_xmit+0x4b/0x60 [ 173.246523][ T8416] __bpf_redirect+0x1479/0x16b0 [ 173.246561][ T8416] ? skb_ensure_writable+0x4d1/0x590 [ 173.246599][ T8416] bpf_clone_redirect+0x498/0x650 [ 173.246649][ T8416] ? kmsan_slab_alloc+0x8a/0xe0 [ 173.246676][ T8416] ___bpf_prog_run+0x4498/0x98e0 [ 173.246709][ T8416] ? bpf_csum_level+0x780/0x780 [ 173.246753][ T8416] __bpf_prog_run512+0x12e/0x190 [ 173.246783][ T8416] ? kmsan_slab_alloc+0x8a/0xe0 [ 173.246811][ T8416] ? bpf_prog_test_run_skb+0x8cb/0x2ad0 [ 173.246833][ T8416] ? __do_sys_bpf+0xb364/0x1a4c0 [ 173.246856][ T8416] ? __ia32_sys_bpf+0x4a/0x70 [ 173.246873][ T8416] ? 0xffffffff81000000 [ 173.246897][ T8416] ? do_fast_syscall_32+0x6b/0xd0 [ 173.246920][ T8416] ? do_SYSENTER_32+0x73/0x90 [ 173.246944][ T8416] ? entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 173.246990][ T8416] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 173.247019][ T8416] ? kmsan_get_metadata+0x116/0x180 [ 173.247046][ T8416] ? kmsan_internal_set_origin+0x75/0xb0 [ 173.247074][ T8416] ? __msan_poison_alloca+0xf0/0x120 [ 173.247098][ T8416] ? kmsan_get_metadata+0x116/0x180 [ 173.247125][ T8416] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 173.247152][ T8416] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 173.247177][ T8416] ? ktime_get+0x384/0x470 [ 173.247212][ T8416] ? kmsan_get_metadata+0x4f/0x180 [ 173.247239][ T8416] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 173.247264][ T8416] ? __bpf_prog_run480+0x190/0x190 [ 173.247288][ T8416] bpf_test_run+0x52d/0xed0 [ 173.247348][ T8416] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 173.247378][ T8416] bpf_prog_test_run_skb+0x1053/0x2ad0 [ 173.247444][ T8416] ? bpf_prog_test_run_tracing+0xa00/0xa00 [ 173.247467][ T8416] __do_sys_bpf+0xb364/0x1a4c0 [ 173.247515][ T8416] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 173.247542][ T8416] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 173.247577][ T8416] ? handle_mm_fault+0x46b0/0x4940 [ 173.247612][ T8416] ? kmsan_get_metadata+0x116/0x180 [ 173.247695][ T8416] ? kmsan_set_origin_checked+0x95/0xf0 [ 173.247722][ T8416] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 173.247746][ T8416] ? kmsan_get_metadata+0x116/0x180 [ 173.247770][ T8416] ? kmsan_get_metadata+0x116/0x180 [ 173.247795][ T8416] ? kmsan_get_metadata+0x116/0x180 [ 173.247823][ T8416] __se_sys_bpf+0x8e/0xa0 [ 173.247853][ T8416] __ia32_sys_bpf+0x4a/0x70 [ 173.247911][ T8416] __do_fast_syscall_32+0x2af/0x480 [ 173.247948][ T8416] do_fast_syscall_32+0x6b/0xd0 [ 173.247977][ T8416] do_SYSENTER_32+0x73/0x90 [ 173.248005][ T8416] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 173.248023][ T8416] RIP: 0023:0xf7feb549 [ 173.248033][ T8416] Code: Bad RIP value. [ 173.248046][ T8416] RSP: 002b:00000000ff8b0f3c EFLAGS: 00000246 ORIG_RAX: 0000000000000165 [ 173.248069][ T8416] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000740 [ 173.248083][ T8416] RDX: 0000000000000028 RSI: 00000000f7feb28c RDI: 0000000000000004 [ 173.248097][ T8416] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 173.248111][ T8416] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 173.248124][ T8416] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 173.248152][ T8416] [ 173.248159][ T8416] Uninit was created at: [ 173.248181][ T8416] kmsan_internal_poison_shadow+0x66/0xd0 [ 173.248201][ T8416] kmsan_slab_alloc+0x8a/0xe0 [ 173.248224][ T8416] __kmalloc_node_track_caller+0xeab/0x12e0 [ 173.248246][ T8416] pskb_expand_head+0x26e/0x1e30 [ 173.248265][ T8416] skb_ensure_writable+0x4d1/0x590 [ 173.248287][ T8416] bpf_clone_redirect+0x26c/0x650 [ 173.248308][ T8416] ___bpf_prog_run+0x4498/0x98e0 [ 173.248327][ T8416] __bpf_prog_run512+0x12e/0x190 [ 173.248348][ T8416] bpf_test_run+0x52d/0xed0 [ 173.248370][ T8416] bpf_prog_test_run_skb+0x1053/0x2ad0 [ 173.248389][ T8416] __do_sys_bpf+0xb364/0x1a4c0 [ 173.248408][ T8416] __se_sys_bpf+0x8e/0xa0 [ 173.248427][ T8416] __ia32_sys_bpf+0x4a/0x70 [ 173.248447][ T8416] __do_fast_syscall_32+0x2af/0x480 [ 173.248468][ T8416] do_fast_syscall_32+0x6b/0xd0 [ 173.248488][ T8416] do_SYSENTER_32+0x73/0x90 [ 173.248508][ T8416] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 173.248517][ T8416] ===================================================== [ 173.248525][ T8416] Disabling lock debugging due to kernel taint [ 173.248538][ T8416] Kernel panic - not syncing: panic_on_warn set ... [ 173.248562][ T8416] CPU: 0 PID: 8416 Comm: syz-executor286 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 173.248574][ T8416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 173.248583][ T8416] Call Trace: [ 173.248610][ T8416] dump_stack+0x21c/0x280 [ 173.248653][ T8416] panic+0x4d7/0xef7 [ 173.248703][ T8416] ? add_taint+0x17c/0x210 [ 173.248736][ T8416] kmsan_report+0x1df/0x1e0 [ 173.248768][ T8416] __msan_warning+0x58/0xa0 [ 173.248798][ T8416] eth_type_trans+0x655/0xc10 [ 173.248842][ T8416] __dev_forward_skb+0x4b0/0xb30 [ 173.248879][ T8416] veth_xmit+0x486/0xcf0 [ 173.248919][ T8416] ? veth_close+0x160/0x160 [ 173.248945][ T8416] xmit_one+0x3cf/0x750 [ 173.248974][ T8416] ? kmsan_get_metadata+0x116/0x180 [ 173.249007][ T8416] __dev_queue_xmit+0x3aad/0x4470 [ 173.249079][ T8416] dev_queue_xmit+0x4b/0x60 [ 173.249109][ T8416] __bpf_redirect+0x1479/0x16b0 [ 173.249147][ T8416] ? skb_ensure_writable+0x4d1/0x590 [ 173.249184][ T8416] bpf_clone_redirect+0x498/0x650 [ 173.249227][ T8416] ? kmsan_slab_alloc+0x8a/0xe0 [ 173.249253][ T8416] ___bpf_prog_run+0x4498/0x98e0 [ 173.249287][ T8416] ? bpf_csum_level+0x780/0x780 [ 173.249331][ T8416] __bpf_prog_run512+0x12e/0x190 [ 173.249361][ T8416] ? kmsan_slab_alloc+0x8a/0xe0 [ 173.249387][ T8416] ? bpf_prog_test_run_skb+0x8cb/0x2ad0 [ 173.249409][ T8416] ? __do_sys_bpf+0xb364/0x1a4c0 [ 173.249431][ T8416] ? __ia32_sys_bpf+0x4a/0x70 [ 173.249448][ T8416] ? 0xffffffff81000000 [ 173.249471][ T8416] ? do_fast_syscall_32+0x6b/0xd0 [ 173.249493][ T8416] ? do_SYSENTER_32+0x73/0x90 [ 173.249517][ T8416] ? entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 173.249550][ T8416] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 173.249578][ T8416] ? kmsan_get_metadata+0x116/0x180 [ 173.249604][ T8416] ? kmsan_internal_set_origin+0x75/0xb0 [ 173.249654][ T8416] ? __msan_poison_alloca+0xf0/0x120 [ 173.249692][ T8416] ? kmsan_get_metadata+0x116/0x180 [ 173.249718][ T8416] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 173.249743][ T8416] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 173.249766][ T8416] ? ktime_get+0x384/0x470 [ 173.249798][ T8416] ? kmsan_get_metadata+0x4f/0x180 [ 173.249838][ T8416] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 173.249876][ T8416] ? __bpf_prog_run480+0x190/0x190 [ 173.249914][ T8416] bpf_test_run+0x52d/0xed0 [ 173.249986][ T8416] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 173.250017][ T8416] bpf_prog_test_run_skb+0x1053/0x2ad0 [ 173.250083][ T8416] ? bpf_prog_test_run_tracing+0xa00/0xa00 [ 173.250105][ T8416] __do_sys_bpf+0xb364/0x1a4c0 [ 173.250155][ T8416] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 173.250182][ T8416] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 173.250206][ T8416] ? handle_mm_fault+0x46b0/0x4940 [ 173.250241][ T8416] ? kmsan_get_metadata+0x116/0x180 [ 173.250282][ T8416] ? kmsan_set_origin_checked+0x95/0xf0 [ 173.250312][ T8416] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 173.250338][ T8416] ? kmsan_get_metadata+0x116/0x180 [ 173.250362][ T8416] ? kmsan_get_metadata+0x116/0x180 [ 173.250390][ T8416] ? kmsan_get_metadata+0x116/0x180 [ 173.250419][ T8416] __se_sys_bpf+0x8e/0xa0 [ 173.250450][ T8416] __ia32_sys_bpf+0x4a/0x70 [ 173.250477][ T8416] __do_fast_syscall_32+0x2af/0x480 [ 173.250538][ T8416] do_fast_syscall_32+0x6b/0xd0 [ 173.250568][ T8416] do_SYSENTER_32+0x73/0x90 [ 173.250598][ T8416] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 173.250616][ T8416] RIP: 0023:0xf7feb549 [ 173.250631][ T8416] Code: Bad RIP value. [ 173.250653][ T8416] RSP: 002b:00000000ff8b0f3c EFLAGS: 00000246 ORIG_RAX: 0000000000000165 [ 173.250680][ T8416] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000740 [ 173.250695][ T8416] RDX: 0000000000000028 RSI: 00000000f7feb28c RDI: 0000000000000004 [ 173.250709][ T8416] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 173.250723][ T8416] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 173.250738][ T8416] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 173.251751][ T8416] Kernel Offset: disabled [ 174.126383][ T8416] Rebooting in 86400 seconds..