[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
[ 79.039160][ T32] audit: type=1800 audit(1567347832.081:25): pid=11595 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0
[ 79.062280][ T32] audit: type=1800 audit(1567347832.111:26): pid=11595 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0
[ 79.097313][ T32] audit: type=1800 audit(1567347832.131:27): pid=11595 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0
[....] Starting periodic command scheduler: cron[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
Debian GNU/Linux 7 syzkaller ttyS0
Warning: Permanently added '10.128.10.60' (ECDSA) to the list of known hosts.
syzkaller login: [ 90.040186][T11746] IPVS: ftp: loaded support on port[0] = 21
[ 90.108178][T11746] chnl_net:caif_netlink_parms(): no params data found
[ 90.141572][T11746] bridge0: port 1(bridge_slave_0) entered blocking state
[ 90.148777][T11746] bridge0: port 1(bridge_slave_0) entered disabled state
[ 90.157086][T11746] device bridge_slave_0 entered promiscuous mode
[ 90.165448][T11746] bridge0: port 2(bridge_slave_1) entered blocking state
[ 90.172685][T11746] bridge0: port 2(bridge_slave_1) entered disabled state
[ 90.180605][T11746] device bridge_slave_1 entered promiscuous mode
[ 90.201207][T11746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 90.212863][T11746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 90.234411][T11746] team0: Port device team_slave_0 added
[ 90.242397][T11746] team0: Port device team_slave_1 added
[ 90.294756][T11746] device hsr_slave_0 entered promiscuous mode
[ 90.342308][T11746] device hsr_slave_1 entered promiscuous mode
[ 90.392817][T11746] bridge0: port 2(bridge_slave_1) entered blocking state
[ 90.399948][T11746] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 90.407649][T11746] bridge0: port 1(bridge_slave_0) entered blocking state
[ 90.414804][T11746] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 90.459337][T11746] 8021q: adding VLAN 0 to HW filter on device bond0
[ 90.473744][ T2934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 90.484232][ T2934] bridge0: port 1(bridge_slave_0) entered disabled state
[ 90.492919][ T2934] bridge0: port 2(bridge_slave_1) entered disabled state
[ 90.501383][ T2934] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 90.516104][T11746] 8021q: adding VLAN 0 to HW filter on device team0
[ 90.528230][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 90.537208][ T31] bridge0: port 1(bridge_slave_0) entered blocking state
[ 90.544340][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 90.575168][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 90.584500][ T31] bridge0: port 2(bridge_slave_1) entered blocking state
[ 90.591588][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 90.601307][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 90.610693][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 90.620976][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 90.630670][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 90.643681][ T2934] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 90.656345][T11746] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
executing program
[ 90.681180][T11746] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 90.730144][ C1] ==================================================================
[ 90.738322][ C1] BUG: KMSAN: uninit-value in br_nf_forward_arp+0xe61/0x1230
[ 90.745675][ C1] CPU: 1 PID: 11746 Comm: syz-executor223 Not tainted 5.3.0-rc6+ #19
[ 90.753799][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 90.763830][ C1] Call Trace:
[ 90.767094][ C1]
[ 90.769926][ C1] dump_stack+0x191/0x1f0
[ 90.774243][ C1] kmsan_report+0x162/0x2d0
[ 90.778728][ C1] __msan_warning+0x75/0xe0
[ 90.783217][ C1] br_nf_forward_arp+0xe61/0x1230
[ 90.788233][ C1] ? xfs_iread_extents+0x10b1/0x18a0
[ 90.793502][ C1] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0
[ 90.799457][ C1] ? br_nf_forward_ip+0x1f60/0x1f60
[ 90.804643][ C1] nf_hook_slow+0x18b/0x3f0
[ 90.809142][ C1] __br_forward+0x78f/0xe30
[ 90.813631][ C1] ? br_dev_queue_push_xmit+0x8e0/0x8e0
[ 90.819153][ C1] br_flood+0xef0/0xfe0
[ 90.823300][ C1] br_handle_frame_finish+0x1a77/0x1c20
[ 90.828830][ C1] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0
[ 90.834789][ C1] ? br_handle_frame+0xdb5/0x1eb0
[ 90.839792][ C1] br_handle_frame+0xfb6/0x1eb0
[ 90.844620][ C1] ? ip6_mc_input+0xec9/0x1470
[ 90.849367][ C1] ? brport_get_ownership+0xf0/0xf0
[ 90.854543][ C1] ? br_pass_frame_up+0x9e0/0x9e0
[ 90.859554][ C1] __netif_receive_skb_core+0x20b9/0x51a0
[ 90.865340][ C1] ? kmsan_set_origin+0x26d/0x340
[ 90.870348][ C1] ? kmsan_get_metadata_or_null+0x208/0x290
[ 90.876223][ C1] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0
[ 90.882214][ C1] process_backlog+0x612/0x1410
[ 90.887087][ C1] ? rps_trigger_softirq+0x2e0/0x2e0
[ 90.892364][ C1] net_rx_action+0x74b/0x1950
[ 90.897038][ C1] ? net_tx_action+0xba0/0xba0
[ 90.901786][ C1] __do_softirq+0x4a1/0x83a
[ 90.906294][ C1] do_softirq_own_stack+0x49/0x80
[ 90.911288][ C1]
[ 90.914211][ C1] __local_bh_enable_ip+0x184/0x1d0
[ 90.919391][ C1] local_bh_enable+0x36/0x40
[ 90.924402][ C1] __dev_queue_xmit+0x304d/0x4270
[ 90.929412][ C1] ? stack_depot_save+0x374/0x480
[ 90.934422][ C1] dev_queue_xmit+0x4b/0x60
[ 90.938900][ C1] ? netdev_core_pick_tx+0x4d0/0x4d0
[ 90.944165][ C1] packet_sendmsg+0x82d7/0x92e0
[ 90.949001][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20
[ 90.955046][ C1] ? aa_label_sk_perm+0x6d6/0x940
[ 90.960055][ C1] ? __msan_metadata_ptr_for_store_8+0x13/0x20
[ 90.966184][ C1] ? rw_copy_check_uvector+0x149/0x650
[ 90.971619][ C1] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0
[ 90.977573][ C1] ? aa_sk_perm+0x686/0xaf0
[ 90.982055][ C1] ? aa_sk_perm+0x730/0xaf0
[ 90.986560][ C1] ? compat_packet_setsockopt+0x360/0x360
[ 90.992266][ C1] ___sys_sendmsg+0x14ff/0x1590
[ 90.997144][ C1] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0
[ 91.003103][ C1] ? __fget_light+0x19f/0x710
[ 91.007758][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20
[ 91.013804][ C1] ? __fget_light+0x1b8/0x710
[ 91.018464][ C1] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0
[ 91.024425][ C1] __sys_sendmmsg+0x53a/0xae0
[ 91.029090][ C1] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0
[ 91.035049][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20
[ 91.041095][ C1] ? prepare_exit_to_usermode+0x19a/0x4d0
[ 91.046792][ C1] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0
[ 91.052752][ C1] __se_sys_sendmmsg+0xbd/0xe0
[ 91.057494][ C1] __x64_sys_sendmmsg+0x56/0x70
[ 91.062323][ C1] do_syscall_64+0xbc/0xf0
[ 91.066719][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xe7
[ 91.072591][ C1] RIP: 0033:0x441ae9
[ 91.076464][ C1] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b 10 fc ff c3 66 2e 0f 1f 84 00 00 00 00
[ 91.096082][ C1] RSP: 002b:00007fffe70a5e48 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 91.104478][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000441ae9
[ 91.112431][ C1] RDX: 0000000000000001 RSI: 0000000020004e80 RDI: 0000000000000004
[ 91.120381][ C1] RBP: 00007fffe70a5e60 R08: 0000000001bbbbbb R09: 0000000001bbbbbb
[ 91.128328][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 91.136275][ C1] R13: 0000000000403080 R14: 0000000000000000 R15: 0000000000000000
[ 91.144231][ C1]
[ 91.146533][ C1] Uninit was created at:
[ 91.150778][ C1] kmsan_internal_poison_shadow+0x53/0xa0
[ 91.156482][ C1] kmsan_slab_alloc+0xaa/0x120
[ 91.161221][ C1] __kmalloc_node_track_caller+0xb55/0x1320
[ 91.167092][ C1] __alloc_skb+0x306/0xa10
[ 91.171483][ C1] alloc_skb_with_frags+0x18c/0xa80
[ 91.176662][ C1] sock_alloc_send_pskb+0xafd/0x10a0
[ 91.182779][ C1] packet_sendmsg+0x6785/0x92e0
[ 91.187605][ C1] ___sys_sendmsg+0x14ff/0x1590
[ 91.192434][ C1] __sys_sendmmsg+0x53a/0xae0
[ 91.197083][ C1] __se_sys_sendmmsg+0xbd/0xe0
[ 91.201841][ C1] __x64_sys_sendmmsg+0x56/0x70
[ 91.206669][ C1] do_syscall_64+0xbc/0xf0
[ 91.211065][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xe7
[ 91.216931][ C1] ==================================================================
[ 91.224964][ C1] Disabling lock debugging due to kernel taint
[ 91.231088][ C1] Kernel panic - not syncing: panic_on_warn set ...
[ 91.237653][ C1] CPU: 1 PID: 11746 Comm: syz-executor223 Tainted: G B 5.3.0-rc6+ #19
[ 91.247075][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 91.257120][ C1] Call Trace:
[ 91.260381][ C1]
[ 91.263220][ C1] dump_stack+0x191/0x1f0
[ 91.267617][ C1] panic+0x3c9/0xc1e
[ 91.271501][ C1] kmsan_report+0x2ca/0x2d0
[ 91.275983][ C1] __msan_warning+0x75/0xe0
[ 91.280472][ C1] br_nf_forward_arp+0xe61/0x1230
[ 91.285473][ C1] ? xfs_iread_extents+0x10b1/0x18a0
[ 91.290738][ C1] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0
[ 91.296725][ C1] ? br_nf_forward_ip+0x1f60/0x1f60
[ 91.301908][ C1] nf_hook_slow+0x18b/0x3f0
[ 91.306406][ C1] __br_forward+0x78f/0xe30
[ 91.310909][ C1] ? br_dev_queue_push_xmit+0x8e0/0x8e0
[ 91.316431][ C1] br_flood+0xef0/0xfe0
[ 91.320582][ C1] br_handle_frame_finish+0x1a77/0x1c20
[ 91.326113][ C1] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0
[ 91.332070][ C1] ? br_handle_frame+0xdb5/0x1eb0
[ 91.337162][ C1] br_handle_frame+0xfb6/0x1eb0
[ 91.341989][ C1] ? ip6_mc_input+0xec9/0x1470
[ 91.346738][ C1] ? brport_get_ownership+0xf0/0xf0
[ 91.352961][ C1] ? br_pass_frame_up+0x9e0/0x9e0
[ 91.357966][ C1] __netif_receive_skb_core+0x20b9/0x51a0
[ 91.363666][ C1] ? kmsan_set_origin+0x26d/0x340
[ 91.368692][ C1] ? kmsan_get_metadata_or_null+0x208/0x290
[ 91.374568][ C1] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0
[ 91.380525][ C1] process_backlog+0x612/0x1410
[ 91.385370][ C1] ? rps_trigger_softirq+0x2e0/0x2e0
[ 91.390633][ C1] net_rx_action+0x74b/0x1950
[ 91.395297][ C1] ? net_tx_action+0xba0/0xba0
[ 91.400037][ C1] __do_softirq+0x4a1/0x83a
[ 91.404531][ C1] do_softirq_own_stack+0x49/0x80
[ 91.409532][ C1]
[ 91.412461][ C1] __local_bh_enable_ip+0x184/0x1d0
[ 91.417638][ C1] local_bh_enable+0x36/0x40
[ 91.422202][ C1] __dev_queue_xmit+0x304d/0x4270
[ 91.427211][ C1] ? stack_depot_save+0x374/0x480
[ 91.432249][ C1] dev_queue_xmit+0x4b/0x60
[ 91.436727][ C1] ? netdev_core_pick_tx+0x4d0/0x4d0
[ 91.441992][ C1] packet_sendmsg+0x82d7/0x92e0
[ 91.446821][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20
[ 91.452867][ C1] ? aa_label_sk_perm+0x6d6/0x940
[ 91.457874][ C1] ? __msan_metadata_ptr_for_store_8+0x13/0x20
[ 91.464002][ C1] ? rw_copy_check_uvector+0x149/0x650
[ 91.469462][ C1] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0
[ 91.475418][ C1] ? aa_sk_perm+0x686/0xaf0
[ 91.479898][ C1] ? aa_sk_perm+0x730/0xaf0
[ 91.484403][ C1] ? compat_packet_setsockopt+0x360/0x360
[ 91.490099][ C1] ___sys_sendmsg+0x14ff/0x1590
[ 91.494942][ C1] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0
[ 91.500900][ C1] ? __fget_light+0x19f/0x710
[ 91.505558][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20
[ 91.511596][ C1] ? __fget_light+0x1b8/0x710
[ 91.516252][ C1] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0
[ 91.522212][ C1] __sys_sendmmsg+0x53a/0xae0
[ 91.526876][ C1] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0
[ 91.532833][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20
[ 91.538873][ C1] ? prepare_exit_to_usermode+0x19a/0x4d0
[ 91.544572][ C1] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0
[ 91.550529][ C1] __se_sys_sendmmsg+0xbd/0xe0
[ 91.555281][ C1] __x64_sys_sendmmsg+0x56/0x70
[ 91.560110][ C1] do_syscall_64+0xbc/0xf0
[ 91.564507][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xe7
[ 91.570374][ C1] RIP: 0033:0x441ae9
[ 91.574247][ C1] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b 10 fc ff c3 66 2e 0f 1f 84 00 00 00 00
[ 91.593826][ C1] RSP: 002b:00007fffe70a5e48 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 91.602212][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000441ae9
[ 91.610173][ C1] RDX: 0000000000000001 RSI: 0000000020004e80 RDI: 0000000000000004
[ 91.618135][ C1] RBP: 00007fffe70a5e60 R08: 0000000001bbbbbb R09: 0000000001bbbbbb
[ 91.626083][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 91.634119][ C1] R13: 0000000000403080 R14: 0000000000000000 R15: 0000000000000000
[ 91.643369][ C1] Kernel Offset: disabled
[ 91.647690][ C1] Rebooting in 86400 seconds..