INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.40' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 48.850065] ================================================================== [ 48.857470] BUG: KMSAN: uninit-value in __skb_try_recv_from_queue+0x4c6/0xe80 [ 48.864718] CPU: 0 PID: 3583 Comm: syzkaller376161 Not tainted 4.16.0+ #81 [ 48.871711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 48.881040] Call Trace: [ 48.883607] dump_stack+0x185/0x1d0 [ 48.887210] ? __skb_try_recv_from_queue+0x4c6/0xe80 [ 48.892286] kmsan_report+0x142/0x240 [ 48.896062] __msan_warning_32+0x6c/0xb0 [ 48.900099] __skb_try_recv_from_queue+0x4c6/0xe80 [ 48.905043] __skb_try_recv_datagram+0x316/0x6f0 [ 48.909782] ? sock_load_diag_module+0x2e0/0x2e0 [ 48.914514] skb_recv_datagram+0x253/0x450 [ 48.918743] rawv6_recvmsg+0x45c/0x1420 [ 48.922693] ? kmsan_set_origin_inline+0x6b/0x120 [ 48.927514] ? sock_recvmsg+0x1d0/0x230 [ 48.931460] ? rawv6_sendmsg+0x4cc0/0x4cc0 [ 48.935668] sock_common_recvmsg+0x16c/0x270 [ 48.940052] sock_recvmsg+0x1d0/0x230 [ 48.943830] ? compat_sock_common_getsockopt+0x1d0/0x1d0 [ 48.949255] ___sys_recvmsg+0x3fb/0x810 [ 48.953206] ? __fget_light+0x56/0x710 [ 48.957064] ? __fdget+0x4e/0x60 [ 48.960404] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 48.965740] ? __fget_light+0x6b9/0x710 [ 48.969692] __sys_recvmmsg+0x54e/0xdb0 [ 48.973643] ? kmsan_set_origin+0x9e/0x160 [ 48.977852] SYSC_recvmmsg+0x29b/0x3e0 [ 48.981717] SyS_recvmmsg+0x76/0xa0 [ 48.985318] do_syscall_64+0x309/0x430 [ 48.989182] ? __sys_recvmmsg+0xdb0/0xdb0 [ 48.993309] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 48.998474] RIP: 0033:0x445889 [ 49.001637] RSP: 002b:00007fe544210db8 EFLAGS: 00000297 ORIG_RAX: 000000000000012b [ 49.009408] RAX: ffffffffffffffda RBX: 00000000006dac24 RCX: 0000000000445889 [ 49.016652] RDX: 0000000000000001 RSI: 0000000020001000 RDI: 0000000000000003 [ 49.023896] RBP: 00000000006dac20 R08: 0000000020000a40 R09: 0000000000000000 [ 49.031139] R10: 0000000000010022 R11: 0000000000000297 R12: 0000000000000000 [ 49.038381] R13: 00007ffce66707df R14: 00007fe5442119c0 R15: 0000000000000001 [ 49.045625] [ 49.047222] Uninit was stored to memory at: [ 49.051518] kmsan_internal_chain_origin+0x12b/0x210 [ 49.056595] __msan_chain_origin+0x69/0xc0 [ 49.060805] __skb_clone+0x894/0x980 [ 49.064490] skb_clone+0x3e8/0x590 [ 49.068002] raw6_local_deliver+0xdaa/0x1ac0 [ 49.072386] ip6_input_finish+0x55c/0x2110 [ 49.076593] ip6_input+0x294/0x320 [ 49.080104] ipv6_rcv+0x20ec/0x26d0 [ 49.083705] __netif_receive_skb_core+0x47cf/0x4a80 [ 49.088695] process_backlog+0x62d/0xe20 [ 49.092728] net_rx_action+0x7c1/0x1a70 [ 49.096677] __do_softirq+0x56d/0x93d [ 49.100445] Uninit was stored to memory at: [ 49.104741] kmsan_internal_chain_origin+0x12b/0x210 [ 49.109818] __msan_chain_origin+0x69/0xc0 [ 49.114025] skb_clone+0x46a/0x590 [ 49.117536] raw6_local_deliver+0xdaa/0x1ac0 [ 49.121917] ip6_input_finish+0x55c/0x2110 [ 49.126124] ip6_input+0x294/0x320 [ 49.129640] ipv6_rcv+0x20ec/0x26d0 [ 49.133239] __netif_receive_skb_core+0x47cf/0x4a80 [ 49.138226] process_backlog+0x62d/0xe20 [ 49.142258] net_rx_action+0x7c1/0x1a70 [ 49.146205] __do_softirq+0x56d/0x93d [ 49.149984] Uninit was created at: [ 49.153499] kmsan_internal_poison_shadow+0xb8/0x1b0 [ 49.158574] kmsan_kmalloc+0x94/0x100 [ 49.162346] kmem_cache_alloc+0xaab/0xb90 [ 49.166464] skb_clone+0x31e/0x590 [ 49.169976] raw6_local_deliver+0xdaa/0x1ac0 [ 49.174357] ip6_input_finish+0x55c/0x2110 [ 49.178565] ip6_input+0x294/0x320 [ 49.182078] ipv6_rcv+0x20ec/0x26d0 [ 49.185676] __netif_receive_skb_core+0x47cf/0x4a80 [ 49.190662] process_backlog+0x62d/0xe20 [ 49.194695] net_rx_action+0x7c1/0x1a70 [ 49.198641] __do_softirq+0x56d/0x93d [ 49.202411] ================================================================== [ 49.209739] Disabling lock debugging due to kernel taint [ 49.215161] Kernel panic - not syncing: panic_on_warn set ... [ 49.215161] [ 49.222498] CPU: 0 PID: 3583 Comm: syzkaller376161 Tainted: G B 4.16.0+ #81 [ 49.230784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 49.240108] Call Trace: [ 49.242673] dump_stack+0x185/0x1d0 [ 49.246274] panic+0x39d/0x940 [ 49.249449] ? __skb_try_recv_from_queue+0x4c6/0xe80 [ 49.254522] kmsan_report+0x238/0x240 [ 49.258296] __msan_warning_32+0x6c/0xb0 [ 49.262333] __skb_try_recv_from_queue+0x4c6/0xe80 [ 49.267243] __skb_try_recv_datagram+0x316/0x6f0 [ 49.271976] ? sock_load_diag_module+0x2e0/0x2e0 [ 49.276710] skb_recv_datagram+0x253/0x450 [ 49.280932] rawv6_recvmsg+0x45c/0x1420 [ 49.284886] ? kmsan_set_origin_inline+0x6b/0x120 [ 49.289707] ? sock_recvmsg+0x1d0/0x230 [ 49.293654] ? rawv6_sendmsg+0x4cc0/0x4cc0 [ 49.297862] sock_common_recvmsg+0x16c/0x270 [ 49.302249] sock_recvmsg+0x1d0/0x230 [ 49.306023] ? compat_sock_common_getsockopt+0x1d0/0x1d0 [ 49.311447] ___sys_recvmsg+0x3fb/0x810 [ 49.315399] ? __fget_light+0x56/0x710 [ 49.319260] ? __fdget+0x4e/0x60 [ 49.322611] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 49.327958] ? __fget_light+0x6b9/0x710 [ 49.331913] __sys_recvmmsg+0x54e/0xdb0 [ 49.335866] ? kmsan_set_origin+0x9e/0x160 [ 49.340080] SYSC_recvmmsg+0x29b/0x3e0 [ 49.343944] SyS_recvmmsg+0x76/0xa0 [ 49.347546] do_syscall_64+0x309/0x430 [ 49.351406] ? __sys_recvmmsg+0xdb0/0xdb0 [ 49.355529] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 49.360691] RIP: 0033:0x445889 [ 49.363855] RSP: 002b:00007fe544210db8 EFLAGS: 00000297 ORIG_RAX: 000000000000012b [ 49.371535] RAX: ffffffffffffffda RBX: 00000000006dac24 RCX: 0000000000445889 [ 49.378778] RDX: 0000000000000001 RSI: 0000000020001000 RDI: 0000000000000003 [ 49.386022] RBP: 00000000006dac20 R08: 0000000020000a40 R09: 0000000000000000 [ 49.393265] R10: 0000000000010022 R11: 0000000000000297 R12: 0000000000000000 [ 49.400508] R13: 00007ffce66707df R14: 00007fe5442119c0 R15: 0000000000000001 [ 49.408252] Dumping ftrace buffer: [ 49.411770] (ftrace buffer empty) [ 49.415454] Kernel Offset: disabled [ 49.419054] Rebooting in 86400 seconds..