INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.30' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 58.048305] ================================================================== [ 58.055738] BUG: KMSAN: uninit-value in fib6_new_table+0x106/0x630 [ 58.062039] CPU: 1 PID: 4510 Comm: syzkaller106961 Not tainted 4.16.0+ #85 [ 58.069026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 58.078358] Call Trace: [ 58.080934] dump_stack+0x185/0x1d0 [ 58.084544] ? fib6_new_table+0x106/0x630 [ 58.088668] kmsan_report+0x142/0x240 [ 58.092447] __msan_warning_32+0x6c/0xb0 [ 58.096485] fib6_new_table+0x106/0x630 [ 58.100464] ip6_route_info_create+0xa17/0x4d00 [ 58.105112] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 58.110540] ? kmsan_set_origin_inline+0x6b/0x120 [ 58.115359] ip6_route_add+0xa2/0x300 [ 58.119151] ? rtnetlink_rcv_msg+0xa32/0x1560 [ 58.123624] ? rtnetlink_rcv_msg+0xa32/0x1560 [ 58.128092] inet6_rtm_newroute+0x37e/0x27a0 [ 58.132480] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 58.137818] ? kmsan_set_origin_inline+0x6b/0x120 [ 58.142635] ? __msan_poison_alloca+0x15c/0x1d0 [ 58.147278] ? _cond_resched+0x3c/0xd0 [ 58.151141] ? rcu_all_qs+0x32/0x1f0 [ 58.154831] ? _cond_resched+0x3c/0xd0 [ 58.158692] ? rcu_all_qs+0x32/0x1f0 [ 58.162390] ? _cond_resched+0x3c/0xd0 [ 58.166252] ? ipv6_route_sysctl_init+0x5e0/0x5e0 [ 58.171073] rtnetlink_rcv_msg+0xa32/0x1560 [ 58.175384] ? SyS_sendmsg+0x54/0x80 [ 58.179074] ? netlink_sendmsg+0x9a6/0x1310 [ 58.183371] ? ___sys_sendmsg+0xec0/0x1310 [ 58.187581] ? SYSC_sendmsg+0x2a3/0x3d0 [ 58.191530] ? SyS_sendmsg+0x54/0x80 [ 58.195218] ? do_syscall_64+0x309/0x430 [ 58.199255] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 58.204593] ? __msan_poison_alloca+0x15c/0x1d0 [ 58.209235] ? _raw_spin_unlock_bh+0x57/0x70 [ 58.213623] ? __local_bh_enable_ip+0x3b/0x140 [ 58.218193] ? _raw_spin_unlock_bh+0x57/0x70 [ 58.222579] ? kmsan_set_origin_inline+0x6b/0x120 [ 58.227397] ? kmsan_set_origin+0x9e/0x160 [ 58.231611] netlink_rcv_skb+0x378/0x600 [ 58.235650] ? rtnetlink_bind+0x120/0x120 [ 58.239777] rtnetlink_rcv+0x50/0x60 [ 58.243479] netlink_unicast+0x166b/0x1740 [ 58.247692] ? rtnetlink_net_exit+0xa0/0xa0 [ 58.251990] netlink_sendmsg+0x1048/0x1310 [ 58.256241] ? netlink_getsockopt+0xc80/0xc80 [ 58.260725] ___sys_sendmsg+0xec0/0x1310 [ 58.264763] ? do_huge_pmd_anonymous_page+0x19d5/0x2520 [ 58.270109] ? __fdget+0x4e/0x60 [ 58.273471] ? __fget_light+0x56/0x710 [ 58.277342] ? __fdget+0x4e/0x60 [ 58.280685] ? __fget_light+0x1dc/0x710 [ 58.284636] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 58.289974] ? __fget_light+0x1f5/0x710 [ 58.293932] SYSC_sendmsg+0x2a3/0x3d0 [ 58.297711] SyS_sendmsg+0x54/0x80 [ 58.301229] do_syscall_64+0x309/0x430 [ 58.305093] ? ___sys_sendmsg+0x1310/0x1310 [ 58.309396] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 58.314561] RIP: 0033:0x43fdc9 [ 58.317725] RSP: 002b:00007ffc905e0fe8 EFLAGS: 00000213 ORIG_RAX: 000000000000002e [ 58.325410] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043fdc9 [ 58.332653] RDX: 0000000000000000 RSI: 000000002001bfc8 RDI: 0000000000000003 [ 58.339899] RBP: 00000000006ca018 R08: 00000000004002c8 R09: 00000000004002c8 [ 58.347151] R10: 00000000004002c8 R11: 0000000000000213 R12: 00000000004016f0 [ 58.354395] R13: 0000000000401780 R14: 0000000000000000 R15: 0000000000000000 [ 58.361640] [ 58.363242] Uninit was stored to memory at: [ 58.367546] kmsan_internal_chain_origin+0x12b/0x210 [ 58.372621] __msan_chain_origin+0x69/0xc0 [ 58.376830] rtm_to_fib6_config+0x1918/0x1b60 [ 58.381298] inet6_rtm_newroute+0x138/0x27a0 [ 58.385683] rtnetlink_rcv_msg+0xa32/0x1560 [ 58.389980] netlink_rcv_skb+0x378/0x600 [ 58.394020] rtnetlink_rcv+0x50/0x60 [ 58.397710] netlink_unicast+0x166b/0x1740 [ 58.401920] netlink_sendmsg+0x1048/0x1310 [ 58.406130] ___sys_sendmsg+0xec0/0x1310 [ 58.410165] SYSC_sendmsg+0x2a3/0x3d0 [ 58.413938] SyS_sendmsg+0x54/0x80 [ 58.417454] do_syscall_64+0x309/0x430 [ 58.421318] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 58.426477] Uninit was created at: [ 58.429992] kmsan_internal_poison_shadow+0xb8/0x1b0 [ 58.435067] kmsan_kmalloc+0x94/0x100 [ 58.438841] kmsan_slab_alloc+0x11/0x20 [ 58.442790] __kmalloc_node_track_caller+0xaed/0x11c0 [ 58.447955] __alloc_skb+0x2cf/0x9f0 [ 58.451652] netlink_sendmsg+0x9a6/0x1310 [ 58.455775] ___sys_sendmsg+0xec0/0x1310 [ 58.459813] SYSC_sendmsg+0x2a3/0x3d0 [ 58.463593] SyS_sendmsg+0x54/0x80 [ 58.467118] do_syscall_64+0x309/0x430 [ 58.471004] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 58.476253] ================================================================== [ 58.483582] Disabling lock debugging due to kernel taint [ 58.489012] Kernel panic - not syncing: panic_on_warn set ... [ 58.489012] [ 58.496354] CPU: 1 PID: 4510 Comm: syzkaller106961 Tainted: G B 4.16.0+ #85 [ 58.504640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 58.513966] Call Trace: [ 58.516533] dump_stack+0x185/0x1d0 [ 58.520137] panic+0x39d/0x940 [ 58.523338] ? fib6_new_table+0x106/0x630 [ 58.527461] kmsan_report+0x238/0x240 [ 58.531237] __msan_warning_32+0x6c/0xb0 [ 58.535273] fib6_new_table+0x106/0x630 [ 58.539225] ip6_route_info_create+0xa17/0x4d00 [ 58.543871] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 58.549297] ? kmsan_set_origin_inline+0x6b/0x120 [ 58.554120] ip6_route_add+0xa2/0x300 [ 58.557898] ? rtnetlink_rcv_msg+0xa32/0x1560 [ 58.562369] ? rtnetlink_rcv_msg+0xa32/0x1560 [ 58.566842] inet6_rtm_newroute+0x37e/0x27a0 [ 58.571229] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 58.576567] ? kmsan_set_origin_inline+0x6b/0x120 [ 58.581384] ? __msan_poison_alloca+0x15c/0x1d0 [ 58.586032] ? _cond_resched+0x3c/0xd0 [ 58.589895] ? rcu_all_qs+0x32/0x1f0 [ 58.593585] ? _cond_resched+0x3c/0xd0 [ 58.597454] ? rcu_all_qs+0x32/0x1f0 [ 58.601146] ? _cond_resched+0x3c/0xd0 [ 58.605023] ? ipv6_route_sysctl_init+0x5e0/0x5e0 [ 58.609847] rtnetlink_rcv_msg+0xa32/0x1560 [ 58.614160] ? SyS_sendmsg+0x54/0x80 [ 58.617858] ? netlink_sendmsg+0x9a6/0x1310 [ 58.622164] ? ___sys_sendmsg+0xec0/0x1310 [ 58.626381] ? SYSC_sendmsg+0x2a3/0x3d0 [ 58.630333] ? SyS_sendmsg+0x54/0x80 [ 58.634023] ? do_syscall_64+0x309/0x430 [ 58.638069] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 58.643409] ? __msan_poison_alloca+0x15c/0x1d0 [ 58.648052] ? _raw_spin_unlock_bh+0x57/0x70 [ 58.652439] ? __local_bh_enable_ip+0x3b/0x140 [ 58.656995] ? _raw_spin_unlock_bh+0x57/0x70 [ 58.661405] ? kmsan_set_origin_inline+0x6b/0x120 [ 58.666226] ? kmsan_set_origin+0x9e/0x160 [ 58.670441] netlink_rcv_skb+0x378/0x600 [ 58.674485] ? rtnetlink_bind+0x120/0x120 [ 58.678612] rtnetlink_rcv+0x50/0x60 [ 58.682310] netlink_unicast+0x166b/0x1740 [ 58.686527] ? rtnetlink_net_exit+0xa0/0xa0 [ 58.690911] netlink_sendmsg+0x1048/0x1310 [ 58.695125] ? netlink_getsockopt+0xc80/0xc80 [ 58.699594] ___sys_sendmsg+0xec0/0x1310 [ 58.703633] ? do_huge_pmd_anonymous_page+0x19d5/0x2520 [ 58.708975] ? __fdget+0x4e/0x60 [ 58.712318] ? __fget_light+0x56/0x710 [ 58.716181] ? __fdget+0x4e/0x60 [ 58.719522] ? __fget_light+0x1dc/0x710 [ 58.723482] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 58.728819] ? __fget_light+0x1f5/0x710 [ 58.732778] SYSC_sendmsg+0x2a3/0x3d0 [ 58.736564] SyS_sendmsg+0x54/0x80 [ 58.740085] do_syscall_64+0x309/0x430 [ 58.743951] ? ___sys_sendmsg+0x1310/0x1310 [ 58.748252] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 58.753418] RIP: 0033:0x43fdc9 [ 58.756581] RSP: 002b:00007ffc905e0fe8 EFLAGS: 00000213 ORIG_RAX: 000000000000002e [ 58.764265] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043fdc9 [ 58.771510] RDX: 0000000000000000 RSI: 000000002001bfc8 RDI: 0000000000000003 [ 58.778754] RBP: 00000000006ca018 R08: 00000000004002c8 R09: 00000000004002c8 [ 58.786000] R10: 00000000004002c8 R11: 0000000000000213 R12: 00000000004016f0 [ 58.793245] R13: 0000000000401780 R14: 0000000000000000 R15: 0000000000000000 [ 58.800866] Dumping ftrace buffer: [ 58.804387] (ftrace buffer empty) [ 58.808072] Kernel Offset: disabled [ 58.811690] Rebooting in 86400 seconds..