INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.21' (ECDSA) to the list of known hosts. executing program executing program syzkaller login: [ 31.829268] device lo entered promiscuous mode [ 31.842589] ================================================================== [ 31.849981] BUG: KMSAN: uninit-value in inet_csk_bind_conflict+0x5f9/0x990 [ 31.856974] CPU: 1 PID: 3574 Comm: syzkaller656291 Not tainted 4.16.0+ #82 [ 31.863976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 31.873320] Call Trace: [ 31.875892] dump_stack+0x185/0x1d0 [ 31.879499] ? inet_csk_bind_conflict+0x5f9/0x990 [ 31.884319] kmsan_report+0x142/0x240 [ 31.888103] __msan_warning_32+0x6c/0xb0 [ 31.892154] inet_csk_bind_conflict+0x5f9/0x990 [ 31.896818] inet_csk_get_port+0x1d28/0x1e40 [ 31.901209] ? __msan_poison_alloca+0x15c/0x1d0 [ 31.905865] ? local_bh_enable+0x36/0x40 [ 31.909911] ? __local_bh_enable_ip+0x3b/0x140 [ 31.914470] ? local_bh_enable+0x36/0x40 [ 31.918515] ? inet_get_local_port_range+0x2d0/0x2d0 [ 31.923599] inet6_bind+0x121c/0x1820 [ 31.927380] ? ipv6_mod_enabled+0x60/0x60 [ 31.931505] SYSC_bind+0x3f2/0x4b0 [ 31.935037] SyS_bind+0x54/0x80 [ 31.938308] do_syscall_64+0x309/0x430 [ 31.942176] ? SYSC_socketpair+0x14a0/0x14a0 [ 31.946574] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 31.951742] RIP: 0033:0x441589 [ 31.954915] RSP: 002b:00007ffc4fa4e308 EFLAGS: 00000217 ORIG_RAX: 0000000000000031 [ 31.962611] RAX: ffffffffffffffda RBX: 0100000000000000 RCX: 0000000000441589 [ 31.969860] RDX: 000000000000001c RSI: 0000000020402000 RDI: 0000000000000003 [ 31.977130] RBP: 0000000000000000 R08: 000000004fa4e488 R09: 000000004fa4e488 [ 31.984395] R10: 0000000000000004 R11: 0000000000000217 R12: 0000000000007c4d [ 31.991641] R13: 00000000006cd448 R14: 0000000000000000 R15: 0000000000000000 [ 31.998888] [ 32.000490] Uninit was stored to memory at: [ 32.004792] kmsan_internal_chain_origin+0x12b/0x210 [ 32.009879] __msan_chain_origin+0x69/0xc0 [ 32.014109] tcp_time_wait+0xf17/0xf50 [ 32.017974] tcp_rcv_state_process+0xebe/0x6490 [ 32.022626] tcp_v6_do_rcv+0x11dd/0x1d90 [ 32.026673] __release_sock+0x2d6/0x680 [ 32.030622] release_sock+0x97/0x2a0 [ 32.034311] tcp_close+0x277/0x18f0 [ 32.037915] inet_release+0x240/0x2a0 [ 32.041694] inet6_release+0xaf/0x100 [ 32.045469] sock_close+0xe0/0x300 [ 32.048984] __fput+0x49e/0xa10 [ 32.052237] ____fput+0x37/0x40 [ 32.055492] task_work_run+0x243/0x2c0 [ 32.059352] do_exit+0x10e1/0x38d0 [ 32.062868] do_group_exit+0x1a0/0x360 [ 32.066732] SYSC_exit_group+0x21/0x30 [ 32.070599] SyS_exit_group+0x25/0x30 [ 32.074375] do_syscall_64+0x309/0x430 [ 32.078242] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 32.083400] Uninit was stored to memory at: [ 32.087697] kmsan_internal_chain_origin+0x12b/0x210 [ 32.092777] __msan_chain_origin+0x69/0xc0 [ 32.096993] inet_twsk_alloc+0xaef/0xc00 [ 32.101046] tcp_time_wait+0xd9/0xf50 [ 32.104841] tcp_rcv_state_process+0xebe/0x6490 [ 32.109496] tcp_v6_do_rcv+0x11dd/0x1d90 [ 32.113546] __release_sock+0x2d6/0x680 [ 32.117497] release_sock+0x97/0x2a0 [ 32.121188] tcp_close+0x277/0x18f0 [ 32.124794] inet_release+0x240/0x2a0 [ 32.128583] inet6_release+0xaf/0x100 [ 32.132361] sock_close+0xe0/0x300 [ 32.135879] __fput+0x49e/0xa10 [ 32.139134] ____fput+0x37/0x40 [ 32.142389] task_work_run+0x243/0x2c0 [ 32.146255] do_exit+0x10e1/0x38d0 [ 32.149773] do_group_exit+0x1a0/0x360 [ 32.153647] SYSC_exit_group+0x21/0x30 [ 32.157536] SyS_exit_group+0x25/0x30 [ 32.161312] do_syscall_64+0x309/0x430 [ 32.165179] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 32.170340] Uninit was created at: [ 32.173860] kmsan_internal_poison_shadow+0xb8/0x1b0 [ 32.178937] kmsan_kmalloc+0x94/0x100 [ 32.182713] kmem_cache_alloc+0xaab/0xb90 [ 32.186839] inet_twsk_alloc+0x13b/0xc00 [ 32.190877] tcp_time_wait+0xd9/0xf50 [ 32.194657] tcp_rcv_state_process+0xebe/0x6490 [ 32.199310] tcp_v6_do_rcv+0x11dd/0x1d90 [ 32.203357] __release_sock+0x2d6/0x680 [ 32.207306] release_sock+0x97/0x2a0 [ 32.210997] tcp_close+0x277/0x18f0 [ 32.214604] inet_release+0x240/0x2a0 [ 32.218382] inet6_release+0xaf/0x100 [ 32.222161] sock_close+0xe0/0x300 [ 32.225676] __fput+0x49e/0xa10 [ 32.228931] ____fput+0x37/0x40 [ 32.232186] task_work_run+0x243/0x2c0 [ 32.236056] do_exit+0x10e1/0x38d0 [ 32.239579] do_group_exit+0x1a0/0x360 [ 32.243454] SYSC_exit_group+0x21/0x30 [ 32.247328] SyS_exit_group+0x25/0x30 [ 32.251112] do_syscall_64+0x309/0x430 [ 32.254977] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 32.260136] ================================================================== [ 32.267468] Disabling lock debugging due to kernel taint [ 32.272892] Kernel panic - not syncing: panic_on_warn set ... [ 32.272892] [ 32.280238] CPU: 1 PID: 3574 Comm: syzkaller656291 Tainted: G B 4.16.0+ #82 [ 32.288545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 32.297875] Call Trace: [ 32.300450] dump_stack+0x185/0x1d0 [ 32.304068] panic+0x39d/0x940 [ 32.307515] ? inet_csk_bind_conflict+0x5f9/0x990 [ 32.312331] kmsan_report+0x238/0x240 [ 32.316114] __msan_warning_32+0x6c/0xb0 [ 32.320153] inet_csk_bind_conflict+0x5f9/0x990 [ 32.324815] inet_csk_get_port+0x1d28/0x1e40 [ 32.329209] ? __msan_poison_alloca+0x15c/0x1d0 [ 32.333858] ? local_bh_enable+0x36/0x40 [ 32.337897] ? __local_bh_enable_ip+0x3b/0x140 [ 32.342460] ? local_bh_enable+0x36/0x40 [ 32.346508] ? inet_get_local_port_range+0x2d0/0x2d0 [ 32.351601] inet6_bind+0x121c/0x1820 [ 32.355401] ? ipv6_mod_enabled+0x60/0x60 [ 32.359529] SYSC_bind+0x3f2/0x4b0 [ 32.363065] SyS_bind+0x54/0x80 [ 32.366336] do_syscall_64+0x309/0x430 [ 32.370204] ? SYSC_socketpair+0x14a0/0x14a0 [ 32.374592] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 32.379760] RIP: 0033:0x441589 [ 32.382924] RSP: 002b:00007ffc4fa4e308 EFLAGS: 00000217 ORIG_RAX: 0000000000000031 [ 32.390610] RAX: ffffffffffffffda RBX: 0100000000000000 RCX: 0000000000441589 [ 32.397858] RDX: 000000000000001c RSI: 0000000020402000 RDI: 0000000000000003 [ 32.405107] RBP: 0000000000000000 R08: 000000004fa4e488 R09: 000000004fa4e488 [ 32.412358] R10: 0000000000000004 R11: 0000000000000217 R12: 0000000000007c4d [ 32.419615] R13: 00000000006cd448 R14: 0000000000000000 R15: 0000000000000000 [ 32.427316] Dumping ftrace buffer: [ 32.430833] (ftrace buffer empty) [ 32.434514] Kernel Offset: disabled [ 32.438117] Rebooting in 86400 seconds..