[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 108.344464][ T32] audit: type=1800 audit(1582868257.402:25): pid=11066 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 108.374156][ T32] audit: type=1800 audit(1582868257.422:26): pid=11066 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 108.421283][ T32] audit: type=1800 audit(1582868257.462:27): pid=11066 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.110' (ECDSA) to the list of known hosts. syzkaller login: [ 119.461654][T11218] IPVS: ftp: loaded support on port[0] = 21 [ 119.555064][T11218] chnl_net:caif_netlink_parms(): no params data found [ 119.634337][T11218] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.641602][T11218] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.650695][T11218] device bridge_slave_0 entered promiscuous mode [ 119.659770][T11218] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.667077][T11218] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.677571][T11218] device bridge_slave_1 entered promiscuous mode [ 119.705355][T11218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.717381][T11218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.745745][T11218] team0: Port device team_slave_0 added [ 119.755493][T11218] team0: Port device team_slave_1 added [ 119.779558][T11218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.786672][T11218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.813140][T11218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.825639][T11218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.832824][T11218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.858963][T11218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.926190][T11218] device hsr_slave_0 entered promiscuous mode [ 119.973587][T11218] device hsr_slave_1 entered promiscuous mode [ 120.125259][T11218] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 120.196973][T11218] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 120.257106][T11218] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 120.306728][T11218] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 120.391464][T11218] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.398770][T11218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.406876][T11218] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.414202][T11218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.479910][T11218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.497814][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 120.509047][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.518642][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.528428][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 120.546696][T11218] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.559356][ T3908] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 120.569418][ T3908] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 120.578933][ T3908] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.586217][ T3908] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.602865][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 120.612921][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 120.623103][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.630462][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.652634][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 120.664642][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 120.685247][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 120.695659][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 120.706666][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 120.724072][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 120.734922][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 120.744915][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 120.754079][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 120.770665][T11218] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 120.784206][T11218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 120.793426][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 120.802596][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 120.827479][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 120.835967][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 120.852767][T11218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.878853][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 120.889854][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 120.919145][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 120.930104][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 120.942768][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 120.951422][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 120.963859][T11218] device veth0_vlan entered promiscuous mode [ 120.979381][T11218] device veth1_vlan entered promiscuous mode [ 121.010658][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 121.020695][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 121.029996][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 121.039239][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 121.055496][T11218] device veth0_macvtap entered promiscuous mode [ 121.068114][T11218] device veth1_macvtap entered promiscuous mode [ 121.091384][T11218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.099256][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 121.108892][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 121.118061][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 121.128009][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 121.144179][T11218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.151781][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 121.161817][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready executing program [ 121.383421][T11218] ===================================================== [ 121.390643][T11218] BUG: KMSAN: uninit-value in ip_tunnel_xmit+0x5f4/0x34f0 [ 121.397870][T11218] CPU: 1 PID: 11218 Comm: syz-executor135 Not tainted 5.6.0-rc2-syzkaller #0 [ 121.407078][T11218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 121.417272][T11218] Call Trace: [ 121.420573][T11218] dump_stack+0x1c9/0x220 [ 121.425027][T11218] kmsan_report+0xf7/0x1e0 [ 121.429579][T11218] __msan_warning+0x58/0xa0 [ 121.434201][T11218] ip_tunnel_xmit+0x5f4/0x34f0 [ 121.438952][T11218] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 121.444760][T11218] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 121.450831][T11218] ? skb_push+0x15b/0x250 [ 121.455165][T11218] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 121.461150][T11218] ? __msan_metadata_ptr_for_store_2+0x13/0x20 [ 121.467312][T11218] ? kmsan_get_metadata+0x11d/0x180 [ 121.472504][T11218] ipgre_xmit+0xfe7/0x1110 [ 121.476925][T11218] ? ipgre_close+0x240/0x240 [ 121.481511][T11218] dev_hard_start_xmit+0x531/0xab0 [ 121.486931][T11218] ? kmsan_get_metadata+0x11d/0x180 [ 121.492195][T11218] __dev_queue_xmit+0x37de/0x4220 [ 121.497243][T11218] dev_queue_xmit+0x4b/0x60 [ 121.501875][T11218] ? netdev_core_pick_tx+0x4d0/0x4d0 [ 121.507163][T11218] packet_sendmsg+0x8347/0x93b0 [ 121.512216][T11218] ? __pagevec_lru_add_fn+0xcef/0xfa0 [ 121.517652][T11218] ? kmsan_get_metadata+0x4f/0x180 [ 121.522756][T11218] ? kmsan_internal_set_origin+0x75/0xb0 [ 121.528396][T11218] ? kmsan_get_metadata+0x11d/0x180 [ 121.533597][T11218] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 121.539536][T11218] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 121.545598][T11218] ? aa_sk_perm+0x83c/0xcd0 [ 121.550113][T11218] ? compat_packet_setsockopt+0x360/0x360 [ 121.555888][T11218] ____sys_sendmsg+0x12b6/0x1350 [ 121.560826][T11218] __sys_sendmsg+0x451/0x5f0 [ 121.565642][T11218] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 121.571553][T11218] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 121.577678][T11218] ? do_user_addr_fault+0xe77/0x1520 [ 121.582975][T11218] ? kmsan_get_metadata+0x11d/0x180 [ 121.588169][T11218] __se_sys_sendmsg+0x97/0xb0 [ 121.592848][T11218] __x64_sys_sendmsg+0x4a/0x70 [ 121.597610][T11218] do_syscall_64+0xb8/0x160 [ 121.602102][T11218] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 121.608090][T11218] RIP: 0033:0x443419 [ 121.612099][T11218] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b 10 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 121.631799][T11218] RSP: 002b:00007ffea0c5c938 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.640209][T11218] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443419 [ 121.648183][T11218] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 121.656266][T11218] RBP: 00007ffea0c5c950 R08: 0000000001bbbbbb R09: 0000000001bbbbbb [ 121.664236][T11218] R10: 0000000001bbbbbb R11: 0000000000000246 R12: 0000000000000000 [ 121.672353][T11218] R13: 00000000004049b0 R14: 0000000000000000 R15: 0000000000000000 [ 121.680341][T11218] [ 121.682658][T11218] Uninit was created at: [ 121.686906][T11218] kmsan_internal_poison_shadow+0x66/0xd0 [ 121.692623][T11218] kmsan_slab_alloc+0x8a/0xe0 [ 121.697291][T11218] __kmalloc_node_track_caller+0xb40/0x1200 [ 121.703185][T11218] __alloc_skb+0x2fd/0xac0 [ 121.707593][T11218] alloc_skb_with_frags+0x18c/0xa70 [ 121.712879][T11218] sock_alloc_send_pskb+0xada/0xc60 [ 121.718064][T11218] packet_sendmsg+0x66a0/0x93b0 [ 121.722912][T11218] ____sys_sendmsg+0x12b6/0x1350 [ 121.727948][T11218] __sys_sendmsg+0x451/0x5f0 [ 121.732519][T11218] __se_sys_sendmsg+0x97/0xb0 [ 121.737319][T11218] __x64_sys_sendmsg+0x4a/0x70 [ 121.742186][T11218] do_syscall_64+0xb8/0x160 [ 121.746798][T11218] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 121.752670][T11218] ===================================================== [ 121.759593][T11218] Disabling lock debugging due to kernel taint [ 121.765743][T11218] Kernel panic - not syncing: panic_on_warn set ... [ 121.772338][T11218] CPU: 1 PID: 11218 Comm: syz-executor135 Tainted: G B 5.6.0-rc2-syzkaller #0 [ 121.782478][T11218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 121.792722][T11218] Call Trace: [ 121.796077][T11218] dump_stack+0x1c9/0x220 [ 121.800404][T11218] panic+0x3d5/0xc3e [ 121.804305][T11218] kmsan_report+0x1df/0x1e0 [ 121.808969][T11218] __msan_warning+0x58/0xa0 [ 121.813472][T11218] ip_tunnel_xmit+0x5f4/0x34f0 [ 121.818368][T11218] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 121.824175][T11218] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 121.830230][T11218] ? skb_push+0x15b/0x250 [ 121.834579][T11218] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 121.840420][T11218] ? __msan_metadata_ptr_for_store_2+0x13/0x20 [ 121.846584][T11218] ? kmsan_get_metadata+0x11d/0x180 [ 121.851933][T11218] ipgre_xmit+0xfe7/0x1110 [ 121.856401][T11218] ? ipgre_close+0x240/0x240 [ 121.861071][T11218] dev_hard_start_xmit+0x531/0xab0 [ 121.866209][T11218] ? kmsan_get_metadata+0x11d/0x180 [ 121.871408][T11218] __dev_queue_xmit+0x37de/0x4220 [ 121.876446][T11218] dev_queue_xmit+0x4b/0x60 [ 121.880952][T11218] ? netdev_core_pick_tx+0x4d0/0x4d0 [ 121.886230][T11218] packet_sendmsg+0x8347/0x93b0 [ 121.891603][T11218] ? __pagevec_lru_add_fn+0xcef/0xfa0 [ 121.896975][T11218] ? kmsan_get_metadata+0x4f/0x180 [ 121.902088][T11218] ? kmsan_internal_set_origin+0x75/0xb0 [ 121.907732][T11218] ? kmsan_get_metadata+0x11d/0x180 [ 121.912931][T11218] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 121.918926][T11218] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 121.925004][T11218] ? aa_sk_perm+0x83c/0xcd0 [ 121.929537][T11218] ? compat_packet_setsockopt+0x360/0x360 [ 121.935384][T11218] ____sys_sendmsg+0x12b6/0x1350 [ 121.940336][T11218] __sys_sendmsg+0x451/0x5f0 [ 121.944958][T11218] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 121.950780][T11218] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 121.956976][T11218] ? do_user_addr_fault+0xe77/0x1520 [ 121.962282][T11218] ? kmsan_get_metadata+0x11d/0x180 [ 121.967713][T11218] __se_sys_sendmsg+0x97/0xb0 [ 121.972491][T11218] __x64_sys_sendmsg+0x4a/0x70 [ 121.977254][T11218] do_syscall_64+0xb8/0x160 [ 121.981756][T11218] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 121.987646][T11218] RIP: 0033:0x443419 [ 121.991533][T11218] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b 10 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 122.011237][T11218] RSP: 002b:00007ffea0c5c938 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.019636][T11218] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443419 [ 122.027705][T11218] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 122.035782][T11218] RBP: 00007ffea0c5c950 R08: 0000000001bbbbbb R09: 0000000001bbbbbb [ 122.043841][T11218] R10: 0000000001bbbbbb R11: 0000000000000246 R12: 0000000000000000 [ 122.051815][T11218] R13: 00000000004049b0 R14: 0000000000000000 R15: 0000000000000000 [ 122.061531][T11218] Kernel Offset: 0x2600000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 122.073092][T11218] Rebooting in 86400 seconds..