[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 40.896233] audit: type=1800 audit(1544985540.943:25): pid=6127 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 40.915234] audit: type=1800 audit(1544985540.953:26): pid=6127 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 40.934538] audit: type=1800 audit(1544985540.963:27): pid=6127 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.43' (ECDSA) to the list of known hosts. 2018/12/16 18:39:14 parsed 1 programs 2018/12/16 18:39:20 executed programs: 0 syzkaller login: [ 60.342688] IPVS: ftp: loaded support on port[0] = 21 [ 60.707867] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.714540] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.722220] device bridge_slave_0 entered promiscuous mode [ 60.747920] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.754568] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.762094] device bridge_slave_1 entered promiscuous mode [ 60.787643] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 60.813097] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 60.886640] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 60.914960] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 61.030452] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 61.038080] team0: Port device team_slave_0 added [ 61.063285] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 61.071079] team0: Port device team_slave_1 added [ 61.096543] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.125037] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.154232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.183451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.423959] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.430586] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.437619] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.444205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.307954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.392309] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.475558] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.481859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.489469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.576343] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.151902] ================================================================== [ 63.159467] BUG: KMSAN: uninit-value in check_6rd+0x65a/0x710 [ 63.165350] CPU: 0 PID: 6548 Comm: syz-executor0 Not tainted 4.20.0-rc5+ #2 [ 63.172445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 63.181791] Call Trace: [ 63.184384] dump_stack+0x1c9/0x220 [ 63.188020] kmsan_report+0x12d/0x290 [ 63.191823] __msan_warning+0x76/0xc0 [ 63.195637] check_6rd+0x65a/0x710 [ 63.199188] sit_tunnel_xmit+0xb58/0x34d0 [ 63.203346] ? dev_hard_start_xmit+0xb3/0xc80 [ 63.207840] ? ipip6_tunnel_uninit+0x800/0x800 [ 63.212417] dev_hard_start_xmit+0x627/0xc80 [ 63.216966] __dev_queue_xmit+0x3173/0x3cf0 [ 63.221300] dev_queue_xmit+0x4b/0x60 [ 63.225096] ? __netdev_pick_tx+0x1290/0x1290 [ 63.229605] packet_sendmsg+0x7cbd/0x9200 [ 63.233758] ? kmsan_memcpy_metadata+0xb/0x10 [ 63.238256] ? __msan_memcpy+0x61/0x70 [ 63.242163] ? do_iter_readv_writev+0x822/0xac0 [ 63.246829] ? __se_sys_writev+0x9b/0xb0 [ 63.250896] ? do_syscall_64+0xcd/0x110 [ 63.254884] ? should_fail+0x5e/0xb70 [ 63.258683] ? get_futex_key+0x2f9/0x1d40 [ 63.262920] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 63.268284] ? aa_sk_perm+0x7ab/0x9e0 [ 63.272106] ? compat_packet_setsockopt+0x360/0x360 [ 63.277149] sock_write_iter+0x3f4/0x4f0 [ 63.281303] ? sock_read_iter+0x4e0/0x4e0 [ 63.285450] do_iter_readv_writev+0x822/0xac0 [ 63.289950] ? sock_read_iter+0x4e0/0x4e0 [ 63.294094] do_iter_write+0x302/0xd80 [ 63.297995] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 63.303445] ? import_iovec+0x41f/0x680 [ 63.307423] do_writev+0x397/0x860 [ 63.310970] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 63.316416] ? prepare_exit_to_usermode+0x137/0x460 [ 63.321558] ? syscall_return_slowpath+0x50/0x680 [ 63.326420] __se_sys_writev+0x9b/0xb0 [ 63.330320] __x64_sys_writev+0x4a/0x70 [ 63.334289] do_syscall_64+0xcd/0x110 [ 63.338086] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 63.343407] RIP: 0033:0x457669 [ 63.346597] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 63.365493] RSP: 002b:00007ffe00037e98 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 63.373246] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457669 [ 63.380518] RDX: 0000000000000001 RSI: 00000000200003c0 RDI: 0000000000000003 [ 63.387779] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 63.395054] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000026f4914 [ 63.402327] R13: 00000000004c39e8 R14: 00000000004dae38 R15: 00000000ffffffff [ 63.409631] [ 63.411252] Uninit was created at: [ 63.414790] kmsan_internal_poison_shadow+0x92/0x150 [ 63.419887] kmsan_kmalloc+0xa1/0x100 [ 63.424112] kmsan_slab_alloc+0xe/0x10 [ 63.428017] __kmalloc_node_track_caller+0xf06/0x1120 [ 63.433206] __alloc_skb+0x318/0xa40 [ 63.437022] alloc_skb_with_frags+0x1c9/0xa80 [ 63.441518] sock_alloc_send_pskb+0xb5d/0x1140 [ 63.446098] packet_sendmsg+0x66a2/0x9200 [ 63.450270] sock_write_iter+0x3f4/0x4f0 [ 63.454334] do_iter_readv_writev+0x822/0xac0 [ 63.458821] do_iter_write+0x302/0xd80 [ 63.462707] do_writev+0x397/0x860 [ 63.466243] __se_sys_writev+0x9b/0xb0 [ 63.470135] __x64_sys_writev+0x4a/0x70 [ 63.474113] do_syscall_64+0xcd/0x110 [ 63.477941] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 63.483130] ================================================================== [ 63.490478] Disabling lock debugging due to kernel taint [ 63.495919] Kernel panic - not syncing: panic_on_warn set ... [ 63.501800] CPU: 0 PID: 6548 Comm: syz-executor0 Tainted: G B 4.20.0-rc5+ #2 [ 63.510279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 63.519622] Call Trace: [ 63.522212] dump_stack+0x1c9/0x220 [ 63.525840] panic+0x3f0/0x98f [ 63.529050] kmsan_report+0x290/0x290 [ 63.532852] __msan_warning+0x76/0xc0 [ 63.536654] check_6rd+0x65a/0x710 [ 63.540197] sit_tunnel_xmit+0xb58/0x34d0 [ 63.544357] ? dev_hard_start_xmit+0xb3/0xc80 [ 63.548851] ? ipip6_tunnel_uninit+0x800/0x800 [ 63.553431] dev_hard_start_xmit+0x627/0xc80 [ 63.557900] __dev_queue_xmit+0x3173/0x3cf0 [ 63.562247] dev_queue_xmit+0x4b/0x60 [ 63.566048] ? __netdev_pick_tx+0x1290/0x1290 [ 63.570547] packet_sendmsg+0x7cbd/0x9200 [ 63.574707] ? kmsan_memcpy_metadata+0xb/0x10 [ 63.579208] ? __msan_memcpy+0x61/0x70 [ 63.583100] ? do_iter_readv_writev+0x822/0xac0 [ 63.587786] ? __se_sys_writev+0x9b/0xb0 [ 63.591856] ? do_syscall_64+0xcd/0x110 [ 63.595839] ? should_fail+0x5e/0xb70 [ 63.599633] ? get_futex_key+0x2f9/0x1d40 [ 63.603781] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 63.609159] ? aa_sk_perm+0x7ab/0x9e0 [ 63.612984] ? compat_packet_setsockopt+0x360/0x360 [ 63.617996] sock_write_iter+0x3f4/0x4f0 [ 63.622060] ? sock_read_iter+0x4e0/0x4e0 [ 63.626221] do_iter_readv_writev+0x822/0xac0 [ 63.630752] ? sock_read_iter+0x4e0/0x4e0 [ 63.634906] do_iter_write+0x302/0xd80 [ 63.638808] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 63.644264] ? import_iovec+0x41f/0x680 [ 63.648242] do_writev+0x397/0x860 [ 63.651789] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 63.657233] ? prepare_exit_to_usermode+0x137/0x460 [ 63.662247] ? syscall_return_slowpath+0x50/0x680 [ 63.667090] __se_sys_writev+0x9b/0xb0 [ 63.670992] __x64_sys_writev+0x4a/0x70 [ 63.675008] do_syscall_64+0xcd/0x110 [ 63.678822] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 63.684017] RIP: 0033:0x457669 [ 63.687204] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 63.706098] RSP: 002b:00007ffe00037e98 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 63.713854] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457669 [ 63.721299] RDX: 0000000000000001 RSI: 00000000200003c0 RDI: 0000000000000003 [ 63.728562] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 63.735827] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000026f4914 [ 63.743088] R13: 00000000004c39e8 R14: 00000000004dae38 R15: 00000000ffffffff [ 63.751798] Kernel Offset: disabled [ 63.755433] Rebooting in 86400 seconds..