[ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.89' (ECDSA) to the list of known hosts. syzkaller login: [ 139.921556][ T8480] IPVS: ftp: loaded support on port[0] = 21 [ 140.084378][ T8480] chnl_net:caif_netlink_parms(): no params data found [ 140.169226][ T8480] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.176378][ T8480] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.186208][ T8480] device bridge_slave_0 entered promiscuous mode [ 140.197107][ T8480] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.204249][ T8480] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.213723][ T8480] device bridge_slave_1 entered promiscuous mode [ 140.245838][ T8480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.260307][ T8480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.293225][ T8480] team0: Port device team_slave_0 added [ 140.302879][ T8480] team0: Port device team_slave_1 added [ 140.332886][ T8480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.340022][ T8480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.366189][ T8480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.379693][ T8480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.386679][ T8480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.412856][ T8480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.456323][ T8480] device hsr_slave_0 entered promiscuous mode [ 140.464015][ T8480] device hsr_slave_1 entered promiscuous mode [ 140.681180][ T8480] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 140.722717][ T8480] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 140.741400][ T8480] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 140.779739][ T8480] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 140.876252][ T8480] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.883573][ T8480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.891468][ T8480] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.898847][ T8480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.982674][ T8480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.004794][ T3751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 141.016117][ T3751] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.027425][ T3751] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.037003][ T3751] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 141.058796][ T8480] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.073451][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 141.083171][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 141.092677][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.100067][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.115009][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 141.124482][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 141.133845][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.141224][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.171342][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 141.181959][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 141.193161][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 141.202897][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 141.215353][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 141.230272][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 141.240346][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 141.271242][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 141.280508][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 141.290541][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 141.299816][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 141.312459][ T8480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 141.343559][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 141.354553][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 141.376355][ T8480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.412061][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 141.421995][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 141.460279][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 141.469165][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 141.487928][ T8480] device veth0_vlan entered promiscuous mode [ 141.498824][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 141.507727][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 141.527028][ T8480] device veth1_vlan entered promiscuous mode [ 141.571320][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 141.580037][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 141.589791][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 141.599571][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 141.615608][ T8480] device veth0_macvtap entered promiscuous mode [ 141.631129][ T8480] device veth1_macvtap entered promiscuous mode [ 141.663896][ T8480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.672367][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 141.681681][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 141.690635][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 141.700501][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 141.719971][ T8480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.729356][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 141.739352][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready executing program [ 141.884362][ C0] ===================================================== [ 141.891342][ C0] BUG: KMSAN: uninit-value in ip_rcv_core+0xccd/0x1490 [ 141.898195][ C0] CPU: 0 PID: 8480 Comm: syz-executor358 Not tainted 5.8.0-rc5-syzkaller #0 [ 141.906856][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 141.916910][ C0] Call Trace: [ 141.920184][ C0] [ 141.923019][ C0] dump_stack+0x21c/0x280 [ 141.927330][ C0] kmsan_report+0xf7/0x1e0 [ 141.931770][ C0] __msan_warning+0x58/0xa0 [ 141.936251][ C0] ip_rcv_core+0xccd/0x1490 [ 141.940736][ C0] ip_rcv+0xc7/0x810 [ 141.944614][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.949794][ C0] __netif_receive_skb+0x265/0x670 [ 141.954882][ C0] ? kmsan_set_origin_checked+0x95/0xf0 [ 141.960404][ C0] ? ip_local_deliver_finish+0x370/0x370 [ 141.966027][ C0] process_backlog+0x50d/0xba0 [ 141.970770][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 141.976575][ C0] ? rps_trigger_softirq+0x2e0/0x2e0 [ 141.981873][ C0] napi_poll+0x43b/0xfd0 [ 141.986096][ C0] ? kmsan_get_metadata+0x116/0x180 [ 141.991277][ C0] net_rx_action+0x35c/0xd40 [ 141.995851][ C0] ? net_tx_action+0xdc0/0xdc0 [ 142.000603][ C0] __do_softirq+0x2ea/0x7f5 [ 142.005087][ C0] asm_call_on_stack+0xf/0x20 [ 142.009737][ C0] [ 142.012655][ C0] do_softirq_own_stack+0x7c/0xa0 [ 142.017658][ C0] __local_bh_enable_ip+0x184/0x1d0 [ 142.022836][ C0] local_bh_enable+0x36/0x40 [ 142.027414][ C0] __dev_queue_xmit+0x41a8/0x4470 [ 142.032480][ C0] dev_queue_xmit+0x4b/0x60 [ 142.036959][ C0] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 142.042221][ C0] packet_sendmsg+0x8542/0x9a80 [ 142.047049][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 142.053096][ C0] ? kmsan_get_metadata+0x116/0x180 [ 142.058293][ C0] ? kmsan_internal_set_origin+0x75/0xb0 [ 142.064254][ C0] ? kmsan_get_metadata+0x116/0x180 [ 142.069434][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 142.075219][ C0] ? __free_slab+0xa50/0x1010 [ 142.079875][ C0] ? aa_sk_perm+0x7da/0xe70 [ 142.084391][ C0] ____sys_sendmsg+0xc82/0x1240 [ 142.089227][ C0] ? compat_packet_setsockopt+0x3c0/0x3c0 [ 142.094927][ C0] __sys_sendmsg+0x6d1/0x840 [ 142.099506][ C0] ? kmsan_get_metadata+0x116/0x180 [ 142.104684][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 142.110470][ C0] ? kmsan_get_metadata+0x116/0x180 [ 142.115649][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 142.121452][ C0] ? kmsan_get_metadata+0x116/0x180 [ 142.126640][ C0] __se_sys_sendmsg+0x97/0xb0 [ 142.131301][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 142.136046][ C0] do_syscall_64+0xad/0x160 [ 142.140532][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 142.146400][ C0] RIP: 0033:0x4439b9 [ 142.150286][ C0] Code: Bad RIP value. [ 142.154328][ C0] RSP: 002b:00007fff60be43d8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.162731][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004439b9 [ 142.170679][ C0] RDX: 0000000000000000 RSI: 0000000020001780 RDI: 0000000000000003 [ 142.178630][ C0] RBP: 00007fff60be43f0 R08: 00000000bb1414ac R09: 00000000bb1414ac [ 142.186578][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff60be4420 [ 142.194528][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 142.202498][ C0] [ 142.204802][ C0] Uninit was stored to memory at: [ 142.209809][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 142.215504][ C0] __msan_chain_origin+0x50/0x90 [ 142.220418][ C0] iptunnel_xmit+0xbb8/0xf00 [ 142.224983][ C0] udp_tunnel_xmit_skb+0x52a/0x650 [ 142.230073][ C0] geneve_xmit+0x180e/0x3200 [ 142.234640][ C0] xmit_one+0x3cf/0x750 [ 142.238796][ C0] __dev_queue_xmit+0x3aad/0x4470 [ 142.243798][ C0] dev_queue_xmit+0x4b/0x60 [ 142.249448][ C0] packet_sendmsg+0x8542/0x9a80 [ 142.254300][ C0] ____sys_sendmsg+0xc82/0x1240 [ 142.259149][ C0] __sys_sendmsg+0x6d1/0x840 [ 142.263730][ C0] __se_sys_sendmsg+0x97/0xb0 [ 142.268394][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 142.273165][ C0] do_syscall_64+0xad/0x160 [ 142.277648][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 142.283511][ C0] [ 142.285816][ C0] Uninit was created at: [ 142.290054][ C0] kmsan_internal_poison_shadow+0x66/0xd0 [ 142.295749][ C0] kmsan_slab_alloc+0x8a/0xe0 [ 142.300407][ C0] __kmalloc_node_track_caller+0xeab/0x12e0 [ 142.306293][ C0] __alloc_skb+0x35f/0xb30 [ 142.310694][ C0] alloc_skb_with_frags+0x1f2/0xc10 [ 142.315879][ C0] sock_alloc_send_pskb+0xc83/0xe50 [ 142.321062][ C0] packet_sendmsg+0x6abb/0x9a80 [ 142.325893][ C0] ____sys_sendmsg+0xc82/0x1240 [ 142.330722][ C0] __sys_sendmsg+0x6d1/0x840 [ 142.335304][ C0] __se_sys_sendmsg+0x97/0xb0 [ 142.339959][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 142.344700][ C0] do_syscall_64+0xad/0x160 [ 142.349285][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 142.355148][ C0] ===================================================== [ 142.362052][ C0] Disabling lock debugging due to kernel taint [ 142.368181][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 142.374749][ C0] CPU: 0 PID: 8480 Comm: syz-executor358 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 142.384782][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 142.395772][ C0] Call Trace: [ 142.399054][ C0] [ 142.401891][ C0] dump_stack+0x21c/0x280 [ 142.406221][ C0] panic+0x4d7/0xef7 [ 142.410105][ C0] ? add_taint+0x17c/0x210 [ 142.414503][ C0] kmsan_report+0x1df/0x1e0 [ 142.419003][ C0] __msan_warning+0x58/0xa0 [ 142.423493][ C0] ip_rcv_core+0xccd/0x1490 [ 142.427986][ C0] ip_rcv+0xc7/0x810 [ 142.431870][ C0] ? kmsan_get_metadata+0x116/0x180 [ 142.437101][ C0] __netif_receive_skb+0x265/0x670 [ 142.442194][ C0] ? kmsan_set_origin_checked+0x95/0xf0 [ 142.447805][ C0] ? ip_local_deliver_finish+0x370/0x370 [ 142.453432][ C0] process_backlog+0x50d/0xba0 [ 142.458182][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 142.463973][ C0] ? rps_trigger_softirq+0x2e0/0x2e0 [ 142.469306][ C0] napi_poll+0x43b/0xfd0 [ 142.473591][ C0] ? kmsan_get_metadata+0x116/0x180 [ 142.478928][ C0] net_rx_action+0x35c/0xd40 [ 142.483513][ C0] ? net_tx_action+0xdc0/0xdc0 [ 142.488357][ C0] __do_softirq+0x2ea/0x7f5 [ 142.492905][ C0] asm_call_on_stack+0xf/0x20 [ 142.497560][ C0] [ 142.500489][ C0] do_softirq_own_stack+0x7c/0xa0 [ 142.505498][ C0] __local_bh_enable_ip+0x184/0x1d0 [ 142.510688][ C0] local_bh_enable+0x36/0x40 [ 142.515260][ C0] __dev_queue_xmit+0x41a8/0x4470 [ 142.520276][ C0] dev_queue_xmit+0x4b/0x60 [ 142.524807][ C0] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 142.530127][ C0] packet_sendmsg+0x8542/0x9a80 [ 142.534975][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 142.541039][ C0] ? kmsan_get_metadata+0x116/0x180 [ 142.546269][ C0] ? kmsan_internal_set_origin+0x75/0xb0 [ 142.551893][ C0] ? kmsan_get_metadata+0x116/0x180 [ 142.557074][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 142.563312][ C0] ? __free_slab+0xa50/0x1010 [ 142.567989][ C0] ? aa_sk_perm+0x7da/0xe70 [ 142.572517][ C0] ____sys_sendmsg+0xc82/0x1240 [ 142.577371][ C0] ? compat_packet_setsockopt+0x3c0/0x3c0 [ 142.583071][ C0] __sys_sendmsg+0x6d1/0x840 [ 142.587650][ C0] ? kmsan_get_metadata+0x116/0x180 [ 142.592828][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 142.598613][ C0] ? kmsan_get_metadata+0x116/0x180 [ 142.603792][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 142.609575][ C0] ? kmsan_get_metadata+0x116/0x180 [ 142.614757][ C0] __se_sys_sendmsg+0x97/0xb0 [ 142.619416][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 142.624159][ C0] do_syscall_64+0xad/0x160 [ 142.628645][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 142.634526][ C0] RIP: 0033:0x4439b9 [ 142.638393][ C0] Code: Bad RIP value. [ 142.642453][ C0] RSP: 002b:00007fff60be43d8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.650927][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004439b9 [ 142.658877][ C0] RDX: 0000000000000000 RSI: 0000000020001780 RDI: 0000000000000003 [ 142.666828][ C0] RBP: 00007fff60be43f0 R08: 00000000bb1414ac R09: 00000000bb1414ac [ 142.674797][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff60be4420 [ 142.682834][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 142.692829][ C0] Kernel Offset: disabled [ 142.697152][ C0] Rebooting in 86400 seconds..