[ OK ] Started OpenBSD Secure Shell server. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.110' (ECDSA) to the list of known hosts. syzkaller login: [ 80.538681][ T8822] IPVS: ftp: loaded support on port[0] = 21 [ 80.673019][ T8822] chnl_net:caif_netlink_parms(): no params data found [ 80.809279][ T8822] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.816567][ T8822] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.825752][ T8822] device bridge_slave_0 entered promiscuous mode [ 80.835216][ T8822] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.842317][ T8822] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.851422][ T8822] device bridge_slave_1 entered promiscuous mode [ 80.880391][ T8822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.892240][ T8822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.922920][ T8822] team0: Port device team_slave_0 added [ 80.931010][ T8822] team0: Port device team_slave_1 added [ 80.961809][ T8822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.969122][ T8822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.995227][ T8822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.007438][ T8822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.014681][ T8822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.040985][ T8822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.117862][ T8822] device hsr_slave_0 entered promiscuous mode [ 81.163679][ T8822] device hsr_slave_1 entered promiscuous mode [ 81.332919][ T8822] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.357788][ T8822] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.407676][ T8822] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.467426][ T8822] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.547802][ T8822] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.554976][ T8822] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.562478][ T8822] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.569776][ T8822] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.628059][ T8822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.644049][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.654711][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.664568][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.675786][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 81.690557][ T8822] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.704781][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.714382][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.723805][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.730998][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.768437][ T8822] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 81.779058][ T8822] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.794422][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.804384][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.813298][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.820413][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.829329][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.839080][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.849589][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.859816][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.869273][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.879493][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.888918][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.898371][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.907756][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.917282][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.934020][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.943347][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.964291][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.971739][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.991304][ T8822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.019884][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.029118][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.054914][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.064338][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.076336][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.085152][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.098205][ T8822] device veth0_vlan entered promiscuous mode [ 82.111523][ T8822] device veth1_vlan entered promiscuous mode [ 82.141087][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.149701][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.159000][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.168277][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.183842][ T8822] device veth0_macvtap entered promiscuous mode [ 82.196089][ T8822] device veth1_macvtap entered promiscuous mode [ 82.220991][ T8822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.228758][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.238319][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.247100][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.256922][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.274050][ T8822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.281947][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.292374][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready executing program [ 82.478676][ T9043] netlink: 8 bytes leftover after parsing attributes in process `syz-executor156'. [ 82.528030][ T9043] device macvlan1 entered promiscuous mode [ 82.584401][ T9043] device veth0_to_hsr entered promiscuous mode executing program [ 82.711262][ T9046] netlink: 8 bytes leftover after parsing attributes in process `syz-executor156'. executing program [ 82.920039][ T9051] netlink: 8 bytes leftover after parsing attributes in process `syz-executor156'. executing program [ 83.141738][ T9056] netlink: 8 bytes leftover after parsing attributes in process `syz-executor156'. executing program [ 83.351080][ T9061] netlink: 8 bytes leftover after parsing attributes in process `syz-executor156'. executing program [ 83.549730][ T9066] netlink: 8 bytes leftover after parsing attributes in process `syz-executor156'. executing program [ 83.712025][ T9071] netlink: 8 bytes leftover after parsing attributes in process `syz-executor156'. executing program [ 83.950525][ T9076] netlink: 8 bytes leftover after parsing attributes in process `syz-executor156'. executing program [ 84.170066][ T9081] netlink: 8 bytes leftover after parsing attributes in process `syz-executor156'. executing program [ 84.361370][ T9086] netlink: 8 bytes leftover after parsing attributes in process `syz-executor156'. [ 84.415065][ C0] ===================================================== [ 84.422062][ C0] BUG: KMSAN: uninit-value in macvlan_start_xmit+0x3ea/0xb50 [ 84.429410][ C0] CPU: 0 PID: 9 Comm: ksoftirqd/0 Not tainted 5.7.0-rc4-syzkaller #0 [ 84.437449][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 84.447487][ C0] Call Trace: [ 84.450820][ C0] dump_stack+0x1c9/0x220 [ 84.455142][ C0] kmsan_report+0xf7/0x1e0 [ 84.459537][ C0] __msan_warning+0x58/0xa0 [ 84.464035][ C0] macvlan_start_xmit+0x3ea/0xb50 [ 84.469048][ C0] ? ret_from_fork+0x35/0x40 [ 84.473636][ C0] ? macvlan_stop+0x720/0x720 [ 84.478332][ C0] dev_hard_start_xmit+0x531/0xab0 [ 84.483483][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 84.488669][ C0] __dev_queue_xmit+0x2f8d/0x3b20 [ 84.493681][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 84.498984][ C0] ? skb_clone+0x404/0x5d0 [ 84.503404][ C0] dev_queue_xmit+0x4b/0x60 [ 84.507899][ C0] hsr_forward_skb+0x2614/0x30d0 [ 84.512845][ C0] ? kmsan_get_metadata+0x4f/0x180 [ 84.517947][ C0] hsr_handle_frame+0x3be/0x500 [ 84.522797][ C0] ? hsr_port_exists+0x90/0x90 [ 84.527607][ C0] __netif_receive_skb_core+0x21ce/0x5870 [ 84.533340][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 84.538531][ C0] ? kmsan_internal_set_origin+0x75/0xb0 [ 84.544187][ C0] ? kmsan_get_metadata+0x4f/0x180 [ 84.549332][ C0] process_backlog+0x936/0x1410 [ 84.554163][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 84.560223][ C0] ? kmsan_get_metadata+0x4f/0x180 [ 84.565316][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 84.570492][ C0] ? rps_trigger_softirq+0x2e0/0x2e0 [ 84.575751][ C0] net_rx_action+0x786/0x1aa0 [ 84.580410][ C0] ? net_tx_action+0xc30/0xc30 [ 84.585158][ C0] __do_softirq+0x311/0x83d [ 84.589672][ C0] ? ksoftirqd_should_run+0x30/0x30 [ 84.594868][ C0] ? takeover_tasklets+0x8f0/0x8f0 [ 84.599964][ C0] run_ksoftirqd+0x25/0x40 [ 84.604361][ C0] smpboot_thread_fn+0x493/0x980 [ 84.609287][ C0] kthread+0x4b5/0x4f0 [ 84.613351][ C0] ? cpu_report_death+0x180/0x180 [ 84.618381][ C0] ? kthread_blkcg+0xf0/0xf0 [ 84.623310][ C0] ret_from_fork+0x35/0x40 [ 84.628935][ C0] [ 84.631239][ C0] Uninit was stored to memory at: [ 84.636265][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 84.641973][ C0] kmsan_memcpy_memmove_metadata+0x272/0x2e0 [ 84.647931][ C0] kmsan_memcpy_metadata+0xb/0x10 [ 84.652930][ C0] __msan_memcpy+0x43/0x50 [ 84.657372][ C0] pskb_expand_head+0x38b/0x1b00 [ 84.662286][ C0] __skb_pad+0x47f/0x900 [ 84.666510][ C0] send_hsr_supervision_frame+0x122d/0x1500 [ 84.672382][ C0] hsr_announce+0x1e2/0x370 [ 84.676906][ C0] call_timer_fn+0x218/0x510 [ 84.681478][ C0] __run_timers+0xcff/0x1210 [ 84.686042][ C0] run_timer_softirq+0x2d/0x50 [ 84.690795][ C0] __do_softirq+0x311/0x83d [ 84.695278][ C0] [ 84.697587][ C0] Uninit was created at: [ 84.701810][ C0] kmsan_save_stack_with_flags+0x3c/0x90 [ 84.707427][ C0] kmsan_alloc_page+0xb9/0x180 [ 84.712179][ C0] __alloc_pages_nodemask+0x56a2/0x5dc0 [ 84.717700][ C0] page_frag_alloc+0x3ae/0x910 [ 84.722543][ C0] __napi_alloc_skb+0x193/0xa60 [ 84.727384][ C0] page_to_skb+0x1a2/0x1390 [ 84.731900][ C0] receive_buf+0xec6/0x8d20 [ 84.736387][ C0] virtnet_poll+0x64b/0x19f0 [ 84.740955][ C0] net_rx_action+0x786/0x1aa0 [ 84.745607][ C0] __do_softirq+0x311/0x83d [ 84.750100][ C0] ===================================================== [ 84.757029][ C0] Disabling lock debugging due to kernel taint [ 84.763165][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 84.773342][ C0] CPU: 0 PID: 9 Comm: ksoftirqd/0 Tainted: G B 5.7.0-rc4-syzkaller #0 [ 84.782785][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 84.792932][ C0] Call Trace: [ 84.796207][ C0] dump_stack+0x1c9/0x220 [ 84.800534][ C0] panic+0x3d5/0xc3e [ 84.804450][ C0] kmsan_report+0x1df/0x1e0 [ 84.808936][ C0] __msan_warning+0x58/0xa0 [ 84.813432][ C0] macvlan_start_xmit+0x3ea/0xb50 [ 84.818449][ C0] ? ret_from_fork+0x35/0x40 [ 84.823052][ C0] ? macvlan_stop+0x720/0x720 [ 84.827720][ C0] dev_hard_start_xmit+0x531/0xab0 [ 84.832901][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 84.838080][ C0] __dev_queue_xmit+0x2f8d/0x3b20 [ 84.843096][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 84.848289][ C0] ? skb_clone+0x404/0x5d0 [ 84.852686][ C0] dev_queue_xmit+0x4b/0x60 [ 84.857204][ C0] hsr_forward_skb+0x2614/0x30d0 [ 84.862120][ C0] ? kmsan_get_metadata+0x4f/0x180 [ 84.867222][ C0] hsr_handle_frame+0x3be/0x500 [ 84.872053][ C0] ? hsr_port_exists+0x90/0x90 [ 84.876796][ C0] __netif_receive_skb_core+0x21ce/0x5870 [ 84.882498][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 84.887680][ C0] ? kmsan_internal_set_origin+0x75/0xb0 [ 84.893309][ C0] ? kmsan_get_metadata+0x4f/0x180 [ 84.898499][ C0] process_backlog+0x936/0x1410 [ 84.903341][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 84.909386][ C0] ? kmsan_get_metadata+0x4f/0x180 [ 84.914478][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 84.919656][ C0] ? rps_trigger_softirq+0x2e0/0x2e0 [ 84.924919][ C0] net_rx_action+0x786/0x1aa0 [ 84.929584][ C0] ? net_tx_action+0xc30/0xc30 [ 84.934330][ C0] __do_softirq+0x311/0x83d [ 84.938909][ C0] ? ksoftirqd_should_run+0x30/0x30 [ 84.944101][ C0] ? takeover_tasklets+0x8f0/0x8f0 [ 84.949208][ C0] run_ksoftirqd+0x25/0x40 [ 84.953613][ C0] smpboot_thread_fn+0x493/0x980 [ 84.958566][ C0] kthread+0x4b5/0x4f0 [ 84.962637][ C0] ? cpu_report_death+0x180/0x180 [ 84.967642][ C0] ? kthread_blkcg+0xf0/0xf0 [ 84.972213][ C0] ret_from_fork+0x35/0x40 [ 84.977966][ C0] Kernel Offset: 0x15200000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 84.989579][ C0] Rebooting in 86400 seconds..