[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 97.641048][ T32] audit: type=1800 audit(1579600288.708:25): pid=11109 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 97.672488][ T32] audit: type=1800 audit(1579600288.738:26): pid=11109 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 97.713273][ T32] audit: type=1800 audit(1579600288.768:27): pid=11109 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.144' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program syzkaller login: [ 127.571954][T11262] ===================================================== [ 127.579927][T11262] BUG: KMSAN: uninit-value in setup_udp_tunnel_sock+0x45e/0x6f0 [ 127.587598][T11262] CPU: 0 PID: 11262 Comm: syz-executor613 Not tainted 5.5.0-rc5-syzkaller #0 [ 127.596514][T11262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 127.606580][T11262] Call Trace: [ 127.610032][T11262] dump_stack+0x1c9/0x220 [ 127.614482][T11262] kmsan_report+0xf7/0x1e0 [ 127.618922][T11262] __msan_warning+0x58/0xa0 [ 127.623429][T11262] setup_udp_tunnel_sock+0x45e/0x6f0 [ 127.628736][T11262] gtp_encap_enable_socket+0x37f/0x5a0 [ 127.634219][T11262] ? gtp_encap_enable_socket+0x5a0/0x5a0 [ 127.639865][T11262] ? gtp_encap_recv+0x10b0/0x10b0 [ 127.645008][T11262] gtp_newlink+0xfb/0x1e50 [ 127.649441][T11262] ? kmsan_get_metadata+0x11d/0x180 [ 127.654637][T11262] ? gtp_validate+0x80/0x80 [ 127.659266][T11262] rtnl_newlink+0x2973/0x3920 [ 127.663967][T11262] ? kmsan_task_context_state+0x47/0x90 [ 127.670409][T11262] ? update_stack_state+0x9aa/0xab0 [ 127.675700][T11262] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 127.681727][T11262] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 127.687936][T11262] ? security_capable+0x1cb/0x220 [ 127.693191][T11262] ? kmsan_get_metadata+0x11d/0x180 [ 127.698462][T11262] ? kmsan_get_metadata+0x11d/0x180 [ 127.703984][T11262] ? kmsan_set_origin_checked+0x95/0xf0 [ 127.709822][T11262] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 127.716082][T11262] ? kmsan_get_metadata+0x11d/0x180 [ 127.721376][T11262] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 127.727313][T11262] ? rtnl_setlink+0x7e0/0x7e0 [ 127.732109][T11262] rtnetlink_rcv_msg+0x1153/0x1570 [ 127.737335][T11262] ? do_syscall_64+0xb8/0x160 [ 127.742019][T11262] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 127.747823][T11262] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 127.753904][T11262] ? kmsan_get_metadata+0x11d/0x180 [ 127.759643][T11262] ? kmsan_get_metadata+0x4f/0x180 [ 127.764760][T11262] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 127.770611][T11262] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 127.776678][T11262] ? rhashtable_jhash2+0x3ac/0x4d0 [ 127.781786][T11262] ? kmsan_get_metadata+0x11d/0x180 [ 127.787000][T11262] ? kmsan_get_metadata+0x4f/0x180 [ 127.792138][T11262] ? kmsan_get_metadata+0x4f/0x180 [ 127.797269][T11262] ? kmsan_get_metadata+0x4f/0x180 [ 127.802408][T11262] ? kmsan_set_origin_checked+0x95/0xf0 [ 127.807959][T11262] ? kmsan_get_metadata+0x11d/0x180 [ 127.813156][T11262] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 127.818973][T11262] netlink_rcv_skb+0x451/0x650 [ 127.823901][T11262] ? rtnetlink_bind+0x120/0x120 [ 127.828761][T11262] rtnetlink_rcv+0x50/0x60 [ 127.833182][T11262] netlink_unicast+0xf9e/0x1100 [ 127.838064][T11262] ? rtnetlink_net_exit+0x90/0x90 [ 127.843212][T11262] netlink_sendmsg+0x1248/0x14d0 [ 127.848312][T11262] ? netlink_getsockopt+0x1440/0x1440 [ 127.853818][T11262] ____sys_sendmsg+0x12b6/0x1350 [ 127.858904][T11262] __sys_sendmsg+0x451/0x5f0 [ 127.864144][T11262] ? kmsan_get_metadata+0x4f/0x180 [ 127.869411][T11262] ? kmsan_get_metadata+0x11d/0x180 [ 127.874719][T11262] ? kmsan_set_origin_checked+0x95/0xf0 [ 127.880380][T11262] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 127.886487][T11262] __se_sys_sendmsg+0x97/0xb0 [ 127.891177][T11262] __x64_sys_sendmsg+0x4a/0x70 [ 127.895950][T11262] do_syscall_64+0xb8/0x160 [ 127.901008][T11262] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 127.906893][T11262] RIP: 0033:0x441359 [ 127.910800][T11262] Code: e8 ac e8 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb 08 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 127.930398][T11262] RSP: 002b:00007fff1cd0ac28 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.938924][T11262] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441359 [ 127.947611][T11262] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 127.955783][T11262] RBP: 00000000006cb018 R08: 00000000004002c8 R09: 00000000004002c8 [ 127.963754][T11262] R10: 00000000004002c8 R11: 0000000000000246 R12: 00000000004020d0 [ 127.971725][T11262] R13: 0000000000402160 R14: 0000000000000000 R15: 0000000000000000 [ 127.979714][T11262] [ 127.982049][T11262] Uninit was created at: [ 127.986302][T11262] kmsan_save_stack_with_flags+0x3c/0x90 [ 127.992036][T11262] kmsan_alloc_page+0x12a/0x310 [ 127.996876][T11262] __alloc_pages_nodemask+0x57f2/0x5f60 [ 128.002420][T11262] alloc_pages_current+0x67d/0x990 [ 128.007569][T11262] alloc_slab_page+0x111/0x12f0 [ 128.012466][T11262] new_slab+0x2bc/0x1130 [ 128.016697][T11262] ___slab_alloc+0x1533/0x1f30 [ 128.021457][T11262] kmem_cache_alloc+0xb23/0xd70 [ 128.026349][T11262] sk_prot_alloc+0xf2/0x620 [ 128.030979][T11262] sk_alloc+0xf0/0xbe0 [ 128.035045][T11262] inet_create+0x7c7/0x1370 [ 128.039556][T11262] __sock_create+0x8eb/0xf00 [ 128.044174][T11262] __sys_socket+0x1a1/0x600 [ 128.048680][T11262] __se_sys_socket+0x8d/0xb0 [ 128.053326][T11262] __x64_sys_socket+0x4a/0x70 [ 128.058022][T11262] do_syscall_64+0xb8/0x160 [ 128.062543][T11262] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 128.068444][T11262] ===================================================== [ 128.075374][T11262] Disabling lock debugging due to kernel taint [ 128.081558][T11262] Kernel panic - not syncing: panic_on_warn set ... [ 128.088696][T11262] CPU: 0 PID: 11262 Comm: syz-executor613 Tainted: G B 5.5.0-rc5-syzkaller #0 [ 128.098888][T11262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 128.109122][T11262] Call Trace: [ 128.112934][T11262] dump_stack+0x1c9/0x220 [ 128.117357][T11262] panic+0x3d5/0xc3e [ 128.121258][T11262] kmsan_report+0x1df/0x1e0 [ 128.125951][T11262] __msan_warning+0x58/0xa0 [ 128.130466][T11262] setup_udp_tunnel_sock+0x45e/0x6f0 [ 128.135746][T11262] gtp_encap_enable_socket+0x37f/0x5a0 [ 128.141218][T11262] ? gtp_encap_enable_socket+0x5a0/0x5a0 [ 128.146845][T11262] ? gtp_encap_recv+0x10b0/0x10b0 [ 128.152196][T11262] gtp_newlink+0xfb/0x1e50 [ 128.156632][T11262] ? kmsan_get_metadata+0x11d/0x180 [ 128.161825][T11262] ? gtp_validate+0x80/0x80 [ 128.166322][T11262] rtnl_newlink+0x2973/0x3920 [ 128.171153][T11262] ? kmsan_task_context_state+0x47/0x90 [ 128.176703][T11262] ? update_stack_state+0x9aa/0xab0 [ 128.181921][T11262] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 128.187741][T11262] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 128.193805][T11262] ? security_capable+0x1cb/0x220 [ 128.198833][T11262] ? kmsan_get_metadata+0x11d/0x180 [ 128.204119][T11262] ? kmsan_get_metadata+0x11d/0x180 [ 128.209308][T11262] ? kmsan_set_origin_checked+0x95/0xf0 [ 128.214874][T11262] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 128.221195][T11262] ? kmsan_get_metadata+0x11d/0x180 [ 128.226487][T11262] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 128.233467][T11262] ? rtnl_setlink+0x7e0/0x7e0 [ 128.238177][T11262] rtnetlink_rcv_msg+0x1153/0x1570 [ 128.243375][T11262] ? do_syscall_64+0xb8/0x160 [ 128.248078][T11262] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 128.253906][T11262] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 128.259969][T11262] ? kmsan_get_metadata+0x11d/0x180 [ 128.265173][T11262] ? kmsan_get_metadata+0x4f/0x180 [ 128.270576][T11262] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 128.276416][T11262] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 128.282511][T11262] ? rhashtable_jhash2+0x3ac/0x4d0 [ 128.287632][T11262] ? kmsan_get_metadata+0x11d/0x180 [ 128.292865][T11262] ? kmsan_get_metadata+0x4f/0x180 [ 128.297993][T11262] ? kmsan_get_metadata+0x4f/0x180 [ 128.303135][T11262] ? kmsan_get_metadata+0x4f/0x180 [ 128.308271][T11262] ? kmsan_set_origin_checked+0x95/0xf0 [ 128.313895][T11262] ? kmsan_get_metadata+0x11d/0x180 [ 128.319141][T11262] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 128.325001][T11262] netlink_rcv_skb+0x451/0x650 [ 128.330060][T11262] ? rtnetlink_bind+0x120/0x120 [ 128.334949][T11262] rtnetlink_rcv+0x50/0x60 [ 128.339381][T11262] netlink_unicast+0xf9e/0x1100 [ 128.344281][T11262] ? rtnetlink_net_exit+0x90/0x90 [ 128.349309][T11262] netlink_sendmsg+0x1248/0x14d0 [ 128.354272][T11262] ? netlink_getsockopt+0x1440/0x1440 [ 128.359734][T11262] ____sys_sendmsg+0x12b6/0x1350 [ 128.364709][T11262] __sys_sendmsg+0x451/0x5f0 [ 128.369310][T11262] ? kmsan_get_metadata+0x4f/0x180 [ 128.374430][T11262] ? kmsan_get_metadata+0x11d/0x180 [ 128.379696][T11262] ? kmsan_set_origin_checked+0x95/0xf0 [ 128.385259][T11262] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 128.391506][T11262] __se_sys_sendmsg+0x97/0xb0 [ 128.396205][T11262] __x64_sys_sendmsg+0x4a/0x70 [ 128.401152][T11262] do_syscall_64+0xb8/0x160 [ 128.405671][T11262] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 128.411637][T11262] RIP: 0033:0x441359 [ 128.415577][T11262] Code: e8 ac e8 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb 08 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 128.435397][T11262] RSP: 002b:00007fff1cd0ac28 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.444132][T11262] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441359 [ 128.452113][T11262] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 128.460951][T11262] RBP: 00000000006cb018 R08: 00000000004002c8 R09: 00000000004002c8 [ 128.468993][T11262] R10: 00000000004002c8 R11: 0000000000000246 R12: 00000000004020d0 [ 128.476979][T11262] R13: 0000000000402160 R14: 0000000000000000 R15: 0000000000000000 [ 128.486635][T11262] Kernel Offset: 0x2d400000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 128.498275][T11262] Rebooting in 86400 seconds..