[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 85.193634][ T30] audit: type=1800 audit(1572301128.259:25): pid=12033 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 85.216796][ T30] audit: type=1800 audit(1572301128.279:26): pid=12033 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 85.254711][ T30] audit: type=1800 audit(1572301128.299:27): pid=12033 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.5' (ECDSA) to the list of known hosts. syzkaller login: [ 95.891422][T12186] IPVS: ftp: loaded support on port[0] = 21 [ 95.961914][T12186] chnl_net:caif_netlink_parms(): no params data found [ 95.997459][T12186] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.004789][T12186] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.013432][T12186] device bridge_slave_0 entered promiscuous mode [ 96.021691][T12186] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.029008][T12186] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.037424][T12186] device bridge_slave_1 entered promiscuous mode [ 96.059565][T12186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.071147][T12186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.094003][T12186] team0: Port device team_slave_0 added [ 96.101723][T12186] team0: Port device team_slave_1 added [ 96.165161][T12186] device hsr_slave_0 entered promiscuous mode [ 96.212850][T12186] device hsr_slave_1 entered promiscuous mode [ 96.336407][T12186] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.343700][T12186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.351451][T12186] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.358775][T12186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.589414][T12186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.634208][ T3382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.654107][ T3382] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.676279][ T3382] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.704783][ T3382] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 96.733338][T12186] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.777549][ T3382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.786742][ T3382] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.794049][ T3382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.802594][ T3382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.811662][ T3382] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.818937][ T3382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.896232][T12186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 96.907245][T12186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.972420][ T3382] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 96.983131][ T3382] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 96.993868][ T3382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 97.003610][ T3382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 97.038118][T12186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.094701][ T3382] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 97.103857][ T3382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready executing program [ 97.235298][T12186] ===================================================== [ 97.242326][T12186] BUG: KMSAN: uninit-value in ip_tunnel_xmit+0x3c6/0x3320 [ 97.249453][T12186] CPU: 1 PID: 12186 Comm: syz-executor915 Not tainted 5.4.0-rc5+ #0 [ 97.257437][T12186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 97.267508][T12186] Call Trace: [ 97.270816][T12186] dump_stack+0x191/0x1f0 [ 97.275195][T12186] kmsan_report+0x128/0x220 [ 97.279719][T12186] __msan_warning+0x73/0xe0 [ 97.284241][T12186] ip_tunnel_xmit+0x3c6/0x3320 [ 97.289029][T12186] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 97.295110][T12186] ? skb_push+0x15b/0x250 [ 97.299468][T12186] ? gre_build_header+0x3ec/0x9f0 [ 97.304528][T12186] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 97.310453][T12186] ipgre_xmit+0xff3/0x1120 [ 97.314925][T12186] ? ipgre_close+0x240/0x240 [ 97.319534][T12186] dev_hard_start_xmit+0x51a/0xab0 [ 97.324682][T12186] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 97.330599][T12186] __dev_queue_xmit+0x35b6/0x4200 [ 97.335671][T12186] dev_queue_xmit+0x4b/0x60 [ 97.340194][T12186] ? netdev_core_pick_tx+0x4d0/0x4d0 [ 97.345499][T12186] packet_sendmsg+0x82d7/0x92e0 [ 97.350369][T12186] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 97.356485][T12186] ? aa_label_sk_perm+0x6d6/0x940 [ 97.361650][T12186] ? kmsan_get_metadata+0x39/0x350 [ 97.366768][T12186] ? kmsan_internal_set_origin+0x6a/0xb0 [ 97.372605][T12186] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 97.378485][T12186] ? aa_sk_perm+0x730/0xaf0 [ 97.383009][T12186] ? compat_packet_setsockopt+0x360/0x360 [ 97.388711][T12186] ___sys_sendmsg+0x14ff/0x1590 [ 97.393572][T12186] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 97.399477][T12186] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 97.405522][T12186] ? __fget_light+0x1b8/0x710 [ 97.410199][T12186] __se_sys_sendmsg+0x305/0x460 [ 97.415054][T12186] __x64_sys_sendmsg+0x4a/0x70 [ 97.419885][T12186] do_syscall_64+0xb6/0x160 [ 97.424397][T12186] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 97.430275][T12186] RIP: 0033:0x441a29 [ 97.434151][T12186] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b 10 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 97.453762][T12186] RSP: 002b:00007ffed8d32cb8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.462160][T12186] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000441a29 [ 97.470128][T12186] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 97.478080][T12186] RBP: 00007ffed8d32cd0 R08: 0000000001bbbbbb R09: 0000000001bbbbbb [ 97.486132][T12186] R10: 0000000001bbbbbb R11: 0000000000000246 R12: 0000000000000000 [ 97.494086][T12186] R13: 0000000000402fc0 R14: 0000000000000000 R15: 0000000000000000 [ 97.502042][T12186] [ 97.504357][T12186] Uninit was created at: [ 97.508584][T12186] kmsan_internal_poison_shadow+0x60/0x120 [ 97.514457][T12186] kmsan_slab_alloc+0xaa/0x120 [ 97.519298][T12186] __kmalloc_node_track_caller+0xd7b/0x1390 [ 97.525178][T12186] __alloc_skb+0x306/0xa10 [ 97.529584][T12186] alloc_skb_with_frags+0x18c/0xa80 [ 97.534759][T12186] sock_alloc_send_pskb+0xafd/0x10a0 [ 97.540022][T12186] packet_sendmsg+0x6785/0x92e0 [ 97.544858][T12186] ___sys_sendmsg+0x14ff/0x1590 [ 97.549686][T12186] __se_sys_sendmsg+0x305/0x460 [ 97.554527][T12186] __x64_sys_sendmsg+0x4a/0x70 [ 97.559324][T12186] do_syscall_64+0xb6/0x160 [ 97.563833][T12186] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 97.569715][T12186] ===================================================== [ 97.576637][T12186] Disabling lock debugging due to kernel taint [ 97.582766][T12186] Kernel panic - not syncing: panic_on_warn set ... [ 97.589358][T12186] CPU: 1 PID: 12186 Comm: syz-executor915 Tainted: G B 5.4.0-rc5+ #0 [ 97.598704][T12186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 97.608737][T12186] Call Trace: [ 97.612013][T12186] dump_stack+0x191/0x1f0 [ 97.616326][T12186] panic+0x3c9/0xc1e [ 97.620222][T12186] kmsan_report+0x215/0x220 [ 97.624712][T12186] __msan_warning+0x73/0xe0 [ 97.629211][T12186] ip_tunnel_xmit+0x3c6/0x3320 [ 97.633970][T12186] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 97.640026][T12186] ? skb_push+0x15b/0x250 [ 97.644349][T12186] ? gre_build_header+0x3ec/0x9f0 [ 97.649361][T12186] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 97.655238][T12186] ipgre_xmit+0xff3/0x1120 [ 97.659654][T12186] ? ipgre_close+0x240/0x240 [ 97.664257][T12186] dev_hard_start_xmit+0x51a/0xab0 [ 97.669414][T12186] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 97.675298][T12186] __dev_queue_xmit+0x35b6/0x4200 [ 97.680433][T12186] dev_queue_xmit+0x4b/0x60 [ 97.684932][T12186] ? netdev_core_pick_tx+0x4d0/0x4d0 [ 97.690208][T12186] packet_sendmsg+0x82d7/0x92e0 [ 97.695066][T12186] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 97.701123][T12186] ? aa_label_sk_perm+0x6d6/0x940 [ 97.706152][T12186] ? kmsan_get_metadata+0x39/0x350 [ 97.711260][T12186] ? kmsan_internal_set_origin+0x6a/0xb0 [ 97.716878][T12186] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 97.722770][T12186] ? aa_sk_perm+0x730/0xaf0 [ 97.727290][T12186] ? compat_packet_setsockopt+0x360/0x360 [ 97.733007][T12186] ___sys_sendmsg+0x14ff/0x1590 [ 97.737855][T12186] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 97.743756][T12186] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 97.749816][T12186] ? __fget_light+0x1b8/0x710 [ 97.754504][T12186] __se_sys_sendmsg+0x305/0x460 [ 97.759347][T12186] __x64_sys_sendmsg+0x4a/0x70 [ 97.764094][T12186] do_syscall_64+0xb6/0x160 [ 97.768582][T12186] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 97.774487][T12186] RIP: 0033:0x441a29 [ 97.778478][T12186] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b 10 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 97.798076][T12186] RSP: 002b:00007ffed8d32cb8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.806479][T12186] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000441a29 [ 97.814438][T12186] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 97.822394][T12186] RBP: 00007ffed8d32cd0 R08: 0000000001bbbbbb R09: 0000000001bbbbbb [ 97.830344][T12186] R10: 0000000001bbbbbb R11: 0000000000000246 R12: 0000000000000000 [ 97.838293][T12186] R13: 0000000000402fc0 R14: 0000000000000000 R15: 0000000000000000 [ 97.847619][T12186] Kernel Offset: disabled [ 97.851947][T12186] Rebooting in 86400 seconds..