INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.31' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 59.787254] ================================================================== [ 59.794652] BUG: KMSAN: uninit-value in do_error_trap+0x39b/0x600 [ 59.800872] CPU: 1 PID: 4499 Comm: syz-executor439 Not tainted 4.16.0+ #87 [ 59.807857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.817186] Call Trace: [ 59.819752] dump_stack+0x185/0x1d0 [ 59.823352] ? do_error_trap+0x39b/0x600 [ 59.827387] kmsan_report+0x142/0x240 [ 59.831173] __msan_warning_32+0x6c/0xb0 [ 59.835210] do_error_trap+0x39b/0x600 [ 59.839072] ? __kfree_skb+0x23a/0x280 [ 59.842937] do_invalid_op+0x46/0x50 [ 59.846628] invalid_op+0x1b/0x40 [ 59.850054] RIP: 0010:kmsan_copy_to_user+0x141/0x160 [ 59.855127] RSP: 0018:ffff88019944f968 EFLAGS: 00010206 [ 59.860465] RAX: ffff8801cf2a9d80 RBX: ffff88019944fb00 RCX: 000000000000000a [ 59.867711] RDX: 00007ffffffff000 RSI: ffff88019944fb00 RDI: 656c69662f2e0001 [ 59.874955] RBP: ffff88019944f9b0 R08: 0000000001080020 R09: ffff8801cbe6fa24 [ 59.882197] R10: ffff8801cb309800 R11: 000000018010000e R12: 000000000000000a [ 59.889439] R13: 656c69662f2e0001 R14: 0000000000000000 R15: 0000000099200094 [ 59.896694] move_addr_to_user+0x32e/0x530 [ 59.900908] ___sys_recvmsg+0x4e2/0x810 [ 59.904881] ? __msan_poison_alloca+0x15c/0x1d0 [ 59.909525] ? _cond_resched+0x3c/0xd0 [ 59.913386] ? rcu_all_qs+0x32/0x1f0 [ 59.917073] ? _cond_resched+0x3c/0xd0 [ 59.920935] ? __sys_recvmmsg+0x908/0xdb0 [ 59.925056] ? rcu_all_qs+0x32/0x1f0 [ 59.928746] __sys_recvmmsg+0x54e/0xdb0 [ 59.932698] ? __msan_poison_alloca+0x15c/0x1d0 [ 59.937343] SYSC_recvmmsg+0x212/0x3e0 [ 59.941207] SyS_recvmmsg+0x76/0xa0 [ 59.944808] do_syscall_64+0x309/0x430 [ 59.948673] ? __sys_recvmmsg+0xdb0/0xdb0 [ 59.952800] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 59.957963] RIP: 0033:0x4455f9 [ 59.961126] RSP: 002b:00007f80cedcbdb8 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 59.968812] RAX: ffffffffffffffda RBX: 00000000006dac24 RCX: 00000000004455f9 [ 59.976055] RDX: 0000000000000379 RSI: 0000000020000000 RDI: 0000000000000003 [ 59.983303] RBP: 00000000006dac20 R08: 0000000000000000 R09: 0000000000000000 [ 59.990546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 59.997791] R13: 00007ffd43a4c2bf R14: 00007f80cedcc9c0 R15: 0000000000000001 [ 60.005037] [ 60.006636] Local variable description: ----timeout@futex_wait [ 60.012574] Variable was created at: [ 60.016275] futex_wait+0xde/0xc20 [ 60.019798] do_futex+0x284a/0x6ad0 [ 60.023395] ================================================================== [ 60.030724] Disabling lock debugging due to kernel taint [ 60.036145] Kernel panic - not syncing: panic_on_warn set ... [ 60.036145] [ 60.043482] CPU: 1 PID: 4499 Comm: syz-executor439 Tainted: G B 4.16.0+ #87 [ 60.051768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 60.061095] Call Trace: [ 60.063657] dump_stack+0x185/0x1d0 [ 60.067262] panic+0x39d/0x940 [ 60.070438] ? do_error_trap+0x39b/0x600 [ 60.074473] kmsan_report+0x238/0x240 [ 60.078249] __msan_warning_32+0x6c/0xb0 [ 60.082301] do_error_trap+0x39b/0x600 [ 60.086166] ? __kfree_skb+0x23a/0x280 [ 60.090034] do_invalid_op+0x46/0x50 [ 60.093723] invalid_op+0x1b/0x40 [ 60.097148] RIP: 0010:kmsan_copy_to_user+0x141/0x160 [ 60.102221] RSP: 0018:ffff88019944f968 EFLAGS: 00010206 [ 60.107555] RAX: ffff8801cf2a9d80 RBX: ffff88019944fb00 RCX: 000000000000000a [ 60.114800] RDX: 00007ffffffff000 RSI: ffff88019944fb00 RDI: 656c69662f2e0001 [ 60.122043] RBP: ffff88019944f9b0 R08: 0000000001080020 R09: ffff8801cbe6fa24 [ 60.129287] R10: ffff8801cb309800 R11: 000000018010000e R12: 000000000000000a [ 60.136539] R13: 656c69662f2e0001 R14: 0000000000000000 R15: 0000000099200094 [ 60.146152] move_addr_to_user+0x32e/0x530 [ 60.150364] ___sys_recvmsg+0x4e2/0x810 [ 60.154317] ? __msan_poison_alloca+0x15c/0x1d0 [ 60.158970] ? _cond_resched+0x3c/0xd0 [ 60.162835] ? rcu_all_qs+0x32/0x1f0 [ 60.166524] ? _cond_resched+0x3c/0xd0 [ 60.170393] ? __sys_recvmmsg+0x908/0xdb0 [ 60.174516] ? rcu_all_qs+0x32/0x1f0 [ 60.178206] __sys_recvmmsg+0x54e/0xdb0 [ 60.182156] ? __msan_poison_alloca+0x15c/0x1d0 [ 60.186804] SYSC_recvmmsg+0x212/0x3e0 [ 60.190668] SyS_recvmmsg+0x76/0xa0 [ 60.194271] do_syscall_64+0x309/0x430 [ 60.198134] ? __sys_recvmmsg+0xdb0/0xdb0 [ 60.202257] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 60.207417] RIP: 0033:0x4455f9 [ 60.210579] RSP: 002b:00007f80cedcbdb8 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 60.218263] RAX: ffffffffffffffda RBX: 00000000006dac24 RCX: 00000000004455f9 [ 60.225507] RDX: 0000000000000379 RSI: 0000000020000000 RDI: 0000000000000003 [ 60.232751] RBP: 00000000006dac20 R08: 0000000000000000 R09: 0000000000000000 [ 60.239995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.247247] R13: 00007ffd43a4c2bf R14: 00007f80cedcc9c0 R15: 0000000000000001 [ 60.254917] Dumping ftrace buffer: [ 60.258437] (ftrace buffer empty) [ 60.262122] Kernel Offset: disabled [ 60.265726] Rebooting in 86400 seconds..