INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.26' (ECDSA) to the list of known hosts. 2018/04/24 00:02:41 parsed 1 programs 2018/04/24 00:02:41 executed programs: 0 syzkaller login: [ 45.234717] IPVS: ftp: loaded support on port[0] = 21 [ 45.508583] ip (4555) used greatest stack depth: 53656 bytes left [ 45.523942] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.530371] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.537834] device bridge_slave_0 entered promiscuous mode [ 45.559891] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.566354] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.573792] device bridge_slave_1 entered promiscuous mode [ 45.595772] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.617737] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.677213] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 45.701334] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 45.793655] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 45.800944] team0: Port device team_slave_0 added [ 45.822429] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 45.829745] team0: Port device team_slave_1 added [ 45.851565] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.870807] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.895764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.915217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.104675] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.111116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.117968] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.124392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.826702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.896477] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 46.966499] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 46.972728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.981107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.047013] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.459401] ================================================================== [ 47.466830] BUG: KMSAN: uninit-value in gre_rcv+0x1241/0x1980 [ 47.472727] CPU: 0 PID: 4776 Comm: syz-executor0 Not tainted 4.16.0+ #87 [ 47.479674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 47.489009] Call Trace: [ 47.491585] [ 47.493721] dump_stack+0x185/0x1d0 [ 47.497338] ? gre_rcv+0x1241/0x1980 [ 47.501044] kmsan_report+0x142/0x240 [ 47.504832] __msan_warning_32+0x6c/0xb0 [ 47.508876] gre_rcv+0x1241/0x1980 [ 47.512393] ? raw_local_deliver+0x63/0x1660 [ 47.516779] ? ip_local_deliver_finish+0x27b/0xec0 [ 47.521696] ? erspan_xmit+0x2ce0/0x2ce0 [ 47.525734] gre_rcv+0x2dc/0x3b0 [ 47.529080] ? gre_parse_header+0x14b0/0x14b0 [ 47.533555] ip_local_deliver_finish+0x874/0xec0 [ 47.538290] ip_local_deliver+0x43c/0x4e0 [ 47.542421] ? ip_local_deliver+0x4e0/0x4e0 [ 47.546723] ? ip_call_ra_chain+0x7b0/0x7b0 [ 47.551031] ip_rcv_finish+0xa36/0x1d00 [ 47.554990] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 47.560338] ? nf_hook_slow+0x36f/0x3d0 [ 47.564296] ip_rcv+0x118f/0x16d0 [ 47.567741] ? ip_rcv+0x16d0/0x16d0 [ 47.571379] __netif_receive_skb_core+0x47df/0x4a90 [ 47.576379] ? rb_insert_color+0x1122/0x1300 [ 47.580769] ? kmsan_write_aligned_origin_inline+0x10/0x60 [ 47.586380] ? ip_local_deliver_finish+0xec0/0xec0 [ 47.591303] process_backlog+0x62d/0xe20 [ 47.595347] ? rps_trigger_softirq+0x2f0/0x2f0 [ 47.599909] net_rx_action+0x7c1/0x1a70 [ 47.603864] ? net_tx_action+0xab0/0xab0 [ 47.607904] __do_softirq+0x56d/0x93d [ 47.611686] do_softirq_own_stack+0x2a/0x40 [ 47.615982] [ 47.618220] __local_bh_enable_ip+0x114/0x140 [ 47.622695] local_bh_enable+0x36/0x40 [ 47.626561] ip_finish_output2+0x135a/0x1470 [ 47.630963] ip_finish_output+0xcb2/0xff0 [ 47.635092] ip_mc_output+0x1029/0x15e0 [ 47.639050] ? ip_mc_finish_output+0x3b0/0x3b0 [ 47.643615] ? ip_build_and_send_pkt+0xec0/0xec0 [ 47.648352] raw_sendmsg+0x4000/0x41f0 [ 47.652225] ? raw_getfrag+0x630/0x630 [ 47.656095] ? compat_raw_ioctl+0x100/0x100 [ 47.660398] inet_sendmsg+0x48d/0x740 [ 47.664177] ? security_socket_sendmsg+0x9e/0x210 [ 47.668998] ? inet_getname+0x500/0x500 [ 47.672958] SYSC_sendto+0x6c3/0x7e0 [ 47.676652] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 47.682088] ? prepare_exit_to_usermode+0x149/0x3a0 [ 47.687088] SyS_sendto+0x8a/0xb0 [ 47.690526] do_syscall_64+0x309/0x430 [ 47.694403] ? SYSC_getpeername+0x560/0x560 [ 47.698712] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 47.703889] RIP: 0033:0x455389 [ 47.707056] RSP: 002b:00007ffec13edb78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 47.714741] RAX: ffffffffffffffda RBX: 00000000017a9914 RCX: 0000000000455389 [ 47.721991] RDX: 0000000000000054 RSI: 0000000020000000 RDI: 0000000000000003 [ 47.729252] RBP: 000000000072bea0 R08: 0000000020000040 R09: 0000000000000010 [ 47.736510] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 47.743763] R13: 0000000000000500 R14: 00000000006fa8a0 R15: 000000000000bc7f [ 47.751019] [ 47.752639] Uninit was stored to memory at: [ 47.756943] kmsan_internal_chain_origin+0x12b/0x210 [ 47.762029] kmsan_memcpy_origins+0x11d/0x170 [ 47.766504] __msan_memcpy+0x109/0x160 [ 47.770372] pskb_expand_head+0x3a6/0x1a70 [ 47.774584] ip_tunnel_xmit+0x2dfe/0x37c0 [ 47.778709] erspan_xmit+0x1cc5/0x2ce0 [ 47.782573] dev_hard_start_xmit+0x5f1/0xc70 [ 47.786970] sch_direct_xmit+0x540/0x8f0 [ 47.791101] __qdisc_run+0x1785/0x3730 [ 47.794966] __dev_queue_xmit+0x1d50/0x3520 [ 47.799263] dev_queue_xmit+0x4b/0x60 [ 47.803043] neigh_resolve_output+0xac6/0xb60 [ 47.807517] ip_finish_output2+0x1344/0x1470 [ 47.811899] ip_finish_output+0xcb2/0xff0 [ 47.816031] ip_mc_output+0x1029/0x15e0 [ 47.819984] raw_sendmsg+0x4000/0x41f0 [ 47.823859] inet_sendmsg+0x48d/0x740 [ 47.827642] SYSC_sendto+0x6c3/0x7e0 [ 47.831337] SyS_sendto+0x8a/0xb0 [ 47.834773] do_syscall_64+0x309/0x430 [ 47.838639] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 47.843802] Uninit was created at: [ 47.847325] kmsan_internal_poison_shadow+0xb8/0x1b0 [ 47.852403] kmsan_kmalloc+0x94/0x100 [ 47.856179] kmsan_slab_alloc+0x11/0x20 [ 47.860136] __kmalloc_node_track_caller+0xaed/0x11c0 [ 47.865303] __alloc_skb+0x2cf/0x9f0 [ 47.868995] alloc_skb_with_frags+0x1d4/0xb20 [ 47.873472] sock_alloc_send_pskb+0xb56/0x1190 [ 47.878035] sock_alloc_send_skb+0xca/0xe0 [ 47.882247] raw_sendmsg+0x2246/0x41f0 [ 47.886110] inet_sendmsg+0x48d/0x740 [ 47.889891] SYSC_sendto+0x6c3/0x7e0 [ 47.893579] SyS_sendto+0x8a/0xb0 [ 47.897009] do_syscall_64+0x309/0x430 [ 47.900889] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 47.906053] ================================================================== [ 47.913392] Disabling lock debugging due to kernel taint [ 47.918817] Kernel panic - not syncing: panic_on_warn set ... [ 47.918817] [ 47.926160] CPU: 0 PID: 4776 Comm: syz-executor0 Tainted: G B 4.16.0+ #87 [ 47.934276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 47.943618] Call Trace: [ 47.946270] [ 47.948403] dump_stack+0x185/0x1d0 [ 47.952014] panic+0x39d/0x940 [ 47.955217] ? gre_rcv+0x1241/0x1980 [ 47.959013] kmsan_report+0x238/0x240 [ 47.962812] __msan_warning_32+0x6c/0xb0 [ 47.966867] gre_rcv+0x1241/0x1980 [ 47.970396] ? raw_local_deliver+0x63/0x1660 [ 47.974781] ? ip_local_deliver_finish+0x27b/0xec0 [ 47.979696] ? erspan_xmit+0x2ce0/0x2ce0 [ 47.983735] gre_rcv+0x2dc/0x3b0 [ 47.987079] ? gre_parse_header+0x14b0/0x14b0 [ 47.991553] ip_local_deliver_finish+0x874/0xec0 [ 47.996287] ip_local_deliver+0x43c/0x4e0 [ 48.000417] ? ip_local_deliver+0x4e0/0x4e0 [ 48.004715] ? ip_call_ra_chain+0x7b0/0x7b0 [ 48.009018] ip_rcv_finish+0xa36/0x1d00 [ 48.012982] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 48.018323] ? nf_hook_slow+0x36f/0x3d0 [ 48.022273] ip_rcv+0x118f/0x16d0 [ 48.025704] ? ip_rcv+0x16d0/0x16d0 [ 48.029322] __netif_receive_skb_core+0x47df/0x4a90 [ 48.034326] ? rb_insert_color+0x1122/0x1300 [ 48.038715] ? kmsan_write_aligned_origin_inline+0x10/0x60 [ 48.044506] ? ip_local_deliver_finish+0xec0/0xec0 [ 48.049416] process_backlog+0x62d/0xe20 [ 48.053467] ? rps_trigger_softirq+0x2f0/0x2f0 [ 48.058031] net_rx_action+0x7c1/0x1a70 [ 48.061992] ? net_tx_action+0xab0/0xab0 [ 48.066056] __do_softirq+0x56d/0x93d [ 48.069847] do_softirq_own_stack+0x2a/0x40 [ 48.074144] [ 48.076364] __local_bh_enable_ip+0x114/0x140 [ 48.080837] local_bh_enable+0x36/0x40 [ 48.084712] ip_finish_output2+0x135a/0x1470 [ 48.089098] ip_finish_output+0xcb2/0xff0 [ 48.093234] ip_mc_output+0x1029/0x15e0 [ 48.097187] ? ip_mc_finish_output+0x3b0/0x3b0 [ 48.101754] ? ip_build_and_send_pkt+0xec0/0xec0 [ 48.106497] raw_sendmsg+0x4000/0x41f0 [ 48.110365] ? raw_getfrag+0x630/0x630 [ 48.114235] ? compat_raw_ioctl+0x100/0x100 [ 48.118533] inet_sendmsg+0x48d/0x740 [ 48.122316] ? security_socket_sendmsg+0x9e/0x210 [ 48.127135] ? inet_getname+0x500/0x500 [ 48.131088] SYSC_sendto+0x6c3/0x7e0 [ 48.134779] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 48.140241] ? prepare_exit_to_usermode+0x149/0x3a0 [ 48.145241] SyS_sendto+0x8a/0xb0 [ 48.148670] do_syscall_64+0x309/0x430 [ 48.152537] ? SYSC_getpeername+0x560/0x560 [ 48.156836] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 48.162004] RIP: 0033:0x455389 [ 48.165178] RSP: 002b:00007ffec13edb78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 48.172872] RAX: ffffffffffffffda RBX: 00000000017a9914 RCX: 0000000000455389 [ 48.180138] RDX: 0000000000000054 RSI: 0000000020000000 RDI: 0000000000000003 [ 48.187392] RBP: 000000000072bea0 R08: 0000000020000040 R09: 0000000000000010 [ 48.194643] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 48.201901] R13: 0000000000000500 R14: 00000000006fa8a0 R15: 000000000000bc7f [ 48.209744] Dumping ftrace buffer: [ 48.213267] (ftrace buffer empty) [ 48.216950] Kernel Offset: disabled [ 48.220553] Rebooting in 86400 seconds..