[ 78.992435] audit: type=1800 audit(1575496364.039:26): pid=10019 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 79.027456] audit: type=1800 audit(1575496364.069:27): pid=10019 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 100.153552] IPVS: ftp: loaded support on port[0] = 21 [ 102.636269] can: request_module (can-proto-0) failed. [ 102.697725] can: request_module (can-proto-0) failed. Warning: Permanently added '10.128.0.111' (ECDSA) to the list of known hosts. 2019/12/04 21:53:17 parsed 1 programs 2019/12/04 21:53:30 executed programs: 0 [ 125.636428] IPVS: ftp: loaded support on port[0] = 21 [ 125.689099] IPVS: ftp: loaded support on port[0] = 21 [ 125.708852] IPVS: ftp: loaded support on port[0] = 21 [ 125.716896] IPVS: ftp: loaded support on port[0] = 21 [ 125.732945] IPVS: ftp: loaded support on port[0] = 21 [ 125.775540] IPVS: ftp: loaded support on port[0] = 21 [ 125.995942] chnl_net:caif_netlink_parms(): no params data found [ 126.213617] chnl_net:caif_netlink_parms(): no params data found [ 126.223713] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.230151] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.237999] device bridge_slave_0 entered promiscuous mode [ 126.245680] chnl_net:caif_netlink_parms(): no params data found [ 126.255832] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.262294] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.270430] device bridge_slave_1 entered promiscuous mode [ 126.298433] chnl_net:caif_netlink_parms(): no params data found [ 126.371273] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.378098] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.385957] device bridge_slave_0 entered promiscuous mode [ 126.429607] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.436572] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.444311] device bridge_slave_1 entered promiscuous mode [ 126.454012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.526503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.541798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.595407] chnl_net:caif_netlink_parms(): no params data found [ 126.625545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.657374] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.663972] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.671779] device bridge_slave_0 entered promiscuous mode [ 126.688408] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.695323] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.703139] device bridge_slave_1 entered promiscuous mode [ 126.736315] team0: Port device team_slave_0 added [ 126.741637] chnl_net:caif_netlink_parms(): no params data found [ 126.756864] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.763345] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.770799] device bridge_slave_0 entered promiscuous mode [ 126.786952] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.793620] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.801357] device bridge_slave_1 entered promiscuous mode [ 126.846620] team0: Port device team_slave_0 added [ 126.854458] team0: Port device team_slave_1 added [ 126.862711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.899205] team0: Port device team_slave_1 added [ 126.907529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.928062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.963381] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.969934] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.977899] device bridge_slave_0 entered promiscuous mode [ 126.989211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.066610] device hsr_slave_0 entered promiscuous mode [ 127.133226] device hsr_slave_1 entered promiscuous mode [ 127.174372] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.180837] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.188974] device bridge_slave_1 entered promiscuous mode [ 127.223473] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.229919] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.237593] device bridge_slave_0 entered promiscuous mode [ 127.246059] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.252768] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.260729] device bridge_slave_1 entered promiscuous mode [ 127.312386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.323163] team0: Port device team_slave_0 added [ 127.331364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.343316] team0: Port device team_slave_0 added [ 127.359759] team0: Port device team_slave_1 added [ 127.368135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.388922] team0: Port device team_slave_1 added [ 127.435401] device hsr_slave_0 entered promiscuous mode [ 127.493116] device hsr_slave_1 entered promiscuous mode [ 127.552692] debugfs: Directory 'hsr0' with parent '/' already present! [ 127.571036] team0: Port device team_slave_0 added [ 127.579267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.610582] team0: Port device team_slave_0 added [ 127.620517] team0: Port device team_slave_1 added [ 127.696786] device hsr_slave_0 entered promiscuous mode [ 127.743129] device hsr_slave_1 entered promiscuous mode [ 127.782681] debugfs: Directory 'hsr0' with parent '/' already present! [ 127.792421] team0: Port device team_slave_1 added [ 127.876102] device hsr_slave_0 entered promiscuous mode [ 127.913442] device hsr_slave_1 entered promiscuous mode [ 127.952798] debugfs: Directory 'hsr0' with parent '/' already present! [ 128.025537] device hsr_slave_0 entered promiscuous mode [ 128.073457] device hsr_slave_1 entered promiscuous mode [ 128.112805] debugfs: Directory 'hsr0' with parent '/' already present! [ 128.176794] device hsr_slave_0 entered promiscuous mode [ 128.223149] device hsr_slave_1 entered promiscuous mode [ 128.262718] debugfs: Directory 'hsr0' with parent '/' already present! [ 128.436152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.561081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.582248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 128.590212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 128.610305] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.622113] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.629554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 128.637617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 128.665862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 128.674839] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 128.683229] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.689713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.697758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 128.706504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 128.715340] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.721893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.764793] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 128.772917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 128.781887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 128.791459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 128.802757] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 128.811513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 128.820536] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 128.837472] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 128.849665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 128.858010] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 128.866279] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.872781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.881326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 128.902210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.928666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.939080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 128.947437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 128.955807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 128.964342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 128.977564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 128.997560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.018676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 129.027832] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 129.036159] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.042695] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.064556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.084343] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.095657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 129.105257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 129.113116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 129.120851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 129.144860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 129.153946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 129.162015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 129.169817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 129.183096] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.210375] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.251031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.281954] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.315589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 129.324644] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 129.337463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 129.346192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 129.354651] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.361248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.368979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 129.377633] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 129.386083] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.392627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.399882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 129.408612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 129.416821] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.423384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.430625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 129.439171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 129.447155] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.453683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.460899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 129.469773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 129.478377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 129.485988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 129.493878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 129.502852] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 129.510790] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.517282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.524766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 129.533952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 129.542202] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 129.550329] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.556759] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.564424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 129.573384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 129.581767] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 129.590319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 129.598708] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 129.607099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 129.615454] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 129.624182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 129.632225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 129.656287] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 129.665391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 129.673757] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 129.681566] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 129.689435] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 129.697488] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 129.705765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 129.714663] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 129.723400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 129.732295] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 129.740968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 129.758548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 129.767538] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 129.776592] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.783096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.792802] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 129.808900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 129.817252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 129.826967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 129.835356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 129.860875] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 129.873170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 129.890427] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 129.902099] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 129.923628] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 129.935408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 129.957134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 129.965717] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 129.974098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 129.982340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 129.990687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 129.999370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 130.007572] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.014099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.021309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 130.030031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 130.038168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 130.046307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 130.054890] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 130.063589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 130.072048] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 130.080498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 130.097059] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 130.105130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 130.133976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 130.142294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 130.181344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 130.194030] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 130.202801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 130.211641] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 130.240649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.262214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.269770] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 130.278366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 130.286744] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 130.305914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.320892] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 130.334212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 130.345256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 130.353691] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 130.361807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 130.370209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 130.399001] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 130.490636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.540403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.614889] raw_sendmsg: syz-executor.3 forgot to set AF_INET. Fix it! [ 130.622585] ===================================================== [ 130.628959] BUG: KMSAN: uninit-value in gre_parse_header+0x143f/0x1750 [ 130.635636] CPU: 1 PID: 10290 Comm: syz-executor.3 Not tainted 5.4.0-rc8-syzkaller #0 [ 130.643586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 130.652927] Call Trace: [ 130.655499] [ 130.657644] dump_stack+0x1c9/0x220 [ 130.661269] kmsan_report+0x128/0x220 [ 130.665066] __msan_warning+0x57/0xa0 [ 130.668864] gre_parse_header+0x143f/0x1750 [ 130.673182] ? kmsan_internal_set_origin+0x6a/0xb0 [ 130.678116] gre_rcv+0x1cb/0x1900 [ 130.681561] ? kmsan_get_shadow_origin_ptr+0x91/0x4d0 [ 130.686748] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 130.692112] ? raw_local_deliver+0xdd/0x1930 [ 130.696537] ? erspan_xmit+0x3600/0x3600 [ 130.700592] gre_rcv+0x2dd/0x3c0 [ 130.703955] ? gre_parse_header+0x1750/0x1750 [ 130.708446] ip_protocol_deliver_rcu+0x70f/0xbd0 [ 130.713362] ip_local_deliver+0x62a/0x7c0 [ 130.717526] ? ip_local_deliver+0x7c0/0x7c0 [ 130.721865] ? ip_protocol_deliver_rcu+0xbd0/0xbd0 [ 130.726795] ip_rcv+0x6c5/0x740 [ 130.730077] ? ip_rcv_core+0x11d0/0x11d0 [ 130.734136] ? ip_local_deliver_finish+0x350/0x350 [ 130.739064] process_backlog+0xece/0x13c0 [ 130.743216] ? kmsan_get_metadata+0x4f/0x290 [ 130.747621] ? ip_local_deliver_finish+0x350/0x350 [ 130.752557] ? rps_trigger_softirq+0x2e0/0x2e0 [ 130.757142] net_rx_action+0x7a6/0x1aa0 [ 130.761126] ? net_tx_action+0xc40/0xc40 [ 130.765289] __do_softirq+0x4a1/0x83a [ 130.769243] do_softirq_own_stack+0x49/0x80 [ 130.773560] [ 130.775831] __local_bh_enable_ip+0x184/0x1d0 [ 130.780332] local_bh_enable+0x36/0x40 [ 130.784248] ip_finish_output2+0x20ec/0x25d0 [ 130.788669] ? ctnetlink_net_exit_batch+0x180/0x180 [ 130.793682] ? nf_ct_deliver_cached_events+0x4c7/0x6e0 [ 130.798967] __ip_finish_output+0xaf8/0xda0 [ 130.803294] ip_finish_output+0x2db/0x420 [ 130.807450] ip_output+0x541/0x610 [ 130.811004] ? ip_mc_finish_output+0x6d0/0x6d0 [ 130.815577] ? ip_finish_output+0x420/0x420 [ 130.819911] ip_push_pending_frames+0x243/0x460 [ 130.824582] raw_sendmsg+0x2e5f/0x4720 [ 130.828508] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 130.833869] ? kmsan_get_shadow_origin_ptr+0x91/0x4d0 [ 130.839052] ? udp_cmsg_send+0x5d0/0x5d0 [ 130.843100] ? compat_raw_ioctl+0x100/0x100 [ 130.847414] inet_sendmsg+0x2d8/0x2e0 [ 130.851211] ? inet_send_prepare+0x600/0x600 [ 130.855615] ___sys_sendmsg+0x12c4/0x1590 [ 130.859757] ? do_futex+0x354/0x6490 [ 130.863475] ? kmsan_internal_set_origin+0x6a/0xb0 [ 130.868399] ? kmsan_internal_unpoison_shadow+0x42/0x80 [ 130.873765] ? __fget_light+0x6b1/0x710 [ 130.877743] ? kmsan_get_shadow_origin_ptr+0x1e8/0x4d0 [ 130.883016] __sys_sendmmsg+0x53a/0xae0 [ 130.887002] ? kmsan_get_shadow_origin_ptr+0x91/0x4d0 [ 130.892185] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 130.897542] ? prepare_exit_to_usermode+0x19a/0x4d0 [ 130.902648] ? kmsan_get_shadow_origin_ptr+0x91/0x4d0 [ 130.907832] __se_sys_sendmmsg+0xbd/0xe0 [ 130.911897] __x64_sys_sendmmsg+0x56/0x70 [ 130.916036] do_syscall_64+0xb6/0x160 [ 130.919829] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 130.925028] RIP: 0033:0x4582b9 [ 130.928211] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 130.947218] RSP: 002b:00007f632b12ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 130.954928] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000004582b9 [ 130.962202] RDX: 0000000000000001 RSI: 00000000200006c0 RDI: 0000000000000004 [ 130.969486] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 130.976764] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f632b12b6d4 [ 130.984047] R13: 00000000004c526b R14: 00000000004d93e0 R15: 00000000ffffffff [ 130.991334] [ 130.993001] Uninit was stored to memory at: [ 130.997346] kmsan_internal_chain_origin+0xb9/0x170 [ 131.002357] kmsan_memcpy_memmove_metadata+0x25c/0x2e0 [ 131.007626] kmsan_memcpy_metadata+0xb/0x10 [ 131.011938] __msan_memcpy+0x56/0x70 [ 131.015639] pskb_expand_head+0x38a/0x19f0 [ 131.019861] ip_tunnel_xmit+0x2974/0x3320 [ 131.024010] erspan_xmit+0x1cae/0x3600 [ 131.027887] dev_hard_start_xmit+0x51a/0xab0 [ 131.032284] sch_direct_xmit+0x515/0x18c0 [ 131.036428] __dev_queue_xmit+0x212d/0x4200 [ 131.040736] dev_queue_xmit+0x4b/0x60 [ 131.044524] neigh_resolve_output+0xab7/0xb50 [ 131.049012] ip_finish_output2+0x1a9c/0x25d0 [ 131.053427] __ip_finish_output+0xaf8/0xda0 [ 131.057746] ip_finish_output+0x2db/0x420 [ 131.061887] ip_output+0x541/0x610 [ 131.065421] ip_push_pending_frames+0x243/0x460 [ 131.070098] raw_sendmsg+0x2e5f/0x4720 [ 131.073977] inet_sendmsg+0x2d8/0x2e0 [ 131.077770] ___sys_sendmsg+0x12c4/0x1590 [ 131.081907] __sys_sendmmsg+0x53a/0xae0 [ 131.085873] __se_sys_sendmmsg+0xbd/0xe0 [ 131.089924] __x64_sys_sendmmsg+0x56/0x70 [ 131.094073] do_syscall_64+0xb6/0x160 [ 131.097963] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 131.103133] [ 131.104747] Uninit was created at: [ 131.108281] kmsan_internal_poison_shadow+0x5c/0x110 [ 131.113378] kmsan_slab_alloc+0x8a/0xe0 [ 131.117340] __kmalloc_node_track_caller+0xe27/0x11a0 [ 131.122529] __alloc_skb+0x306/0xa10 [ 131.126235] __ip_append_data+0x3aab/0x5290 [ 131.130546] ip_append_data+0x328/0x480 [ 131.134508] raw_sendmsg+0x2d69/0x4720 [ 131.138381] inet_sendmsg+0x2d8/0x2e0 [ 131.142179] ___sys_sendmsg+0x12c4/0x1590 [ 131.146314] __sys_sendmmsg+0x53a/0xae0 [ 131.150285] __se_sys_sendmmsg+0xbd/0xe0 [ 131.154362] __x64_sys_sendmmsg+0x56/0x70 [ 131.158511] do_syscall_64+0xb6/0x160 [ 131.162326] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 131.167502] ===================================================== [ 131.173715] Disabling lock debugging due to kernel taint [ 131.179155] Kernel panic - not syncing: panic_on_warn set ... [ 131.185033] CPU: 1 PID: 10290 Comm: syz-executor.3 Tainted: G B 5.4.0-rc8-syzkaller #0 [ 131.194636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 131.203982] Call Trace: [ 131.206561] [ 131.208710] dump_stack+0x1c9/0x220 [ 131.212334] panic+0x3c9/0xc1e [ 131.215556] kmsan_report+0x215/0x220 [ 131.219355] __msan_warning+0x57/0xa0 [ 131.223154] gre_parse_header+0x143f/0x1750 [ 131.227472] ? kmsan_internal_set_origin+0x6a/0xb0 [ 131.232409] gre_rcv+0x1cb/0x1900 [ 131.235863] ? kmsan_get_shadow_origin_ptr+0x91/0x4d0 [ 131.241047] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 131.246410] ? raw_local_deliver+0xdd/0x1930 [ 131.250840] ? erspan_xmit+0x3600/0x3600 [ 131.255854] gre_rcv+0x2dd/0x3c0 [ 131.259228] ? gre_parse_header+0x1750/0x1750 [ 131.263719] ip_protocol_deliver_rcu+0x70f/0xbd0 [ 131.268564] ip_local_deliver+0x62a/0x7c0 [ 131.272714] ? ip_local_deliver+0x7c0/0x7c0 [ 131.277389] ? ip_protocol_deliver_rcu+0xbd0/0xbd0 [ 131.282309] ip_rcv+0x6c5/0x740 [ 131.285588] ? ip_rcv_core+0x11d0/0x11d0 [ 131.289642] ? ip_local_deliver_finish+0x350/0x350 [ 131.294571] process_backlog+0xece/0x13c0 [ 131.298715] ? kmsan_get_metadata+0x4f/0x290 [ 131.303118] ? ip_local_deliver_finish+0x350/0x350 [ 131.308051] ? rps_trigger_softirq+0x2e0/0x2e0 [ 131.312623] net_rx_action+0x7a6/0x1aa0 [ 131.316605] ? net_tx_action+0xc40/0xc40 [ 131.320658] __do_softirq+0x4a1/0x83a [ 131.324472] do_softirq_own_stack+0x49/0x80 [ 131.328777] [ 131.331008] __local_bh_enable_ip+0x184/0x1d0 [ 131.335513] local_bh_enable+0x36/0x40 [ 131.339394] ip_finish_output2+0x20ec/0x25d0 [ 131.343793] ? ctnetlink_net_exit_batch+0x180/0x180 [ 131.348807] ? nf_ct_deliver_cached_events+0x4c7/0x6e0 [ 131.354097] __ip_finish_output+0xaf8/0xda0 [ 131.358451] ip_finish_output+0x2db/0x420 [ 131.362601] ip_output+0x541/0x610 [ 131.366143] ? ip_mc_finish_output+0x6d0/0x6d0 [ 131.370721] ? ip_finish_output+0x420/0x420 [ 131.375037] ip_push_pending_frames+0x243/0x460 [ 131.379713] raw_sendmsg+0x2e5f/0x4720 [ 131.383628] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 131.388985] ? kmsan_get_shadow_origin_ptr+0x91/0x4d0 [ 131.394171] ? udp_cmsg_send+0x5d0/0x5d0 [ 131.398219] ? compat_raw_ioctl+0x100/0x100 [ 131.403657] inet_sendmsg+0x2d8/0x2e0 [ 131.407453] ? inet_send_prepare+0x600/0x600 [ 131.411855] ___sys_sendmsg+0x12c4/0x1590 [ 131.415990] ? do_futex+0x354/0x6490 [ 131.419706] ? kmsan_internal_set_origin+0x6a/0xb0 [ 131.424635] ? kmsan_internal_unpoison_shadow+0x42/0x80 [ 131.430004] ? __fget_light+0x6b1/0x710 [ 131.433980] ? kmsan_get_shadow_origin_ptr+0x1e8/0x4d0 [ 131.439249] __sys_sendmmsg+0x53a/0xae0 [ 131.443235] ? kmsan_get_shadow_origin_ptr+0x91/0x4d0 [ 131.448424] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 131.453792] ? prepare_exit_to_usermode+0x19a/0x4d0 [ 131.458804] ? kmsan_get_shadow_origin_ptr+0x91/0x4d0 [ 131.463996] __se_sys_sendmmsg+0xbd/0xe0 [ 131.468057] __x64_sys_sendmmsg+0x56/0x70 [ 131.472198] do_syscall_64+0xb6/0x160 [ 131.475996] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 131.481178] RIP: 0033:0x4582b9 [ 131.484367] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 131.503350] RSP: 002b:00007f632b12ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 131.511060] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000004582b9 [ 131.518321] RDX: 0000000000000001 RSI: 00000000200006c0 RDI: 0000000000000004 [ 131.525580] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 131.532841] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f632b12b6d4 [ 131.540101] R13: 00000000004c526b R14: 00000000004d93e0 R15: 00000000ffffffff [ 131.549000] Kernel Offset: 0x2ea00000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 131.560041] Rebooting in 86400 seconds..