INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.60' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 50.087202] ================================================================== [ 50.094612] BUG: KMSAN: uninit-value in __netif_receive_skb_core+0x4630/0x4a80 [ 50.101951] CPU: 0 PID: 3514 Comm: syzkaller031167 Not tainted 4.16.0+ #83 [ 50.108936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.118265] Call Trace: [ 50.120826] [ 50.122959] dump_stack+0x185/0x1d0 [ 50.126565] ? __netif_receive_skb_core+0x4630/0x4a80 [ 50.131737] kmsan_report+0x142/0x240 [ 50.135547] __msan_warning_32+0x6c/0xb0 [ 50.139610] __netif_receive_skb_core+0x4630/0x4a80 [ 50.144637] ? kmsan_internal_memset_shadow_inline+0xd0/0xd0 [ 50.150425] process_backlog+0x62d/0xe20 [ 50.154476] ? rps_trigger_softirq+0x2f0/0x2f0 [ 50.159062] net_rx_action+0x7c1/0x1a70 [ 50.163040] ? net_tx_action+0xab0/0xab0 [ 50.167142] __do_softirq+0x56d/0x93d [ 50.170927] do_softirq_own_stack+0x2a/0x40 [ 50.175221] [ 50.177443] __local_bh_enable_ip+0x114/0x140 [ 50.181920] local_bh_enable+0x36/0x40 [ 50.185796] __dev_queue_xmit+0x2a31/0x2b60 [ 50.190108] dev_queue_xmit+0x4b/0x60 [ 50.193888] ? __netdev_pick_tx+0xb60/0xb60 [ 50.198188] packet_sendmsg+0x7c57/0x8a10 [ 50.202314] ? kmsan_set_origin_inline+0x6b/0x120 [ 50.207133] ? __msan_poison_alloca+0x15c/0x1d0 [ 50.211787] ? mmdrop+0x3f/0xd0 [ 50.215042] ? balance_callback+0x48/0x250 [ 50.219254] ? finish_task_switch+0xfe/0x230 [ 50.223655] ? compat_packet_setsockopt+0x360/0x360 [ 50.228658] sock_write_iter+0x3b9/0x470 [ 50.232702] ? sock_read_iter+0x480/0x480 [ 50.236833] do_iter_readv_writev+0x7bb/0x970 [ 50.241311] ? sock_read_iter+0x480/0x480 [ 50.245435] do_iter_write+0x30d/0xd40 [ 50.249303] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 50.254765] do_writev+0x3c9/0x830 [ 50.258287] ? syscall_return_slowpath+0xe9/0x700 [ 50.264868] SYSC_writev+0x9b/0xb0 [ 50.268390] SyS_writev+0x56/0x80 [ 50.271835] do_syscall_64+0x309/0x430 [ 50.275713] ? SYSC_readv+0xb0/0xb0 [ 50.279331] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 50.284503] RIP: 0033:0x43ffb9 [ 50.287672] RSP: 002b:00007ffd42187708 EFLAGS: 00000217 ORIG_RAX: 0000000000000014 [ 50.295365] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043ffb9 [ 50.302616] RDX: 0000000000000001 RSI: 00000000200010c0 RDI: 0000000000000003 [ 50.309875] RBP: 00000000006ca018 R08: 00000000004002c8 R09: 00000000004002c8 [ 50.317123] R10: 00000000004002c8 R11: 0000000000000217 R12: 00000000004018e0 [ 50.324391] R13: 0000000000401970 R14: 0000000000000000 R15: 0000000000000000 [ 50.331641] [ 50.333245] Uninit was stored to memory at: [ 50.337556] kmsan_internal_chain_origin+0x12b/0x210 [ 50.342635] __msan_chain_origin+0x69/0xc0 [ 50.346852] skb_vlan_untag+0x950/0xee0 [ 50.350802] __netif_receive_skb_core+0x70a/0x4a80 [ 50.355702] process_backlog+0x62d/0xe20 [ 50.359742] net_rx_action+0x7c1/0x1a70 [ 50.363690] __do_softirq+0x56d/0x93d [ 50.367457] Uninit was created at: [ 50.370973] kmsan_internal_poison_shadow+0xb8/0x1b0 [ 50.376052] kmsan_kmalloc+0x94/0x100 [ 50.379828] kmsan_slab_alloc+0x11/0x20 [ 50.383777] __kmalloc_node_track_caller+0xaed/0x11c0 [ 50.388937] __alloc_skb+0x2cf/0x9f0 [ 50.392642] alloc_skb_with_frags+0x1d4/0xb20 [ 50.397116] sock_alloc_send_pskb+0xb56/0x1190 [ 50.401669] packet_sendmsg+0x6444/0x8a10 [ 50.405792] sock_write_iter+0x3b9/0x470 [ 50.409826] do_iter_readv_writev+0x7bb/0x970 [ 50.414295] do_iter_write+0x30d/0xd40 [ 50.418153] do_writev+0x3c9/0x830 [ 50.421679] SYSC_writev+0x9b/0xb0 [ 50.425205] SyS_writev+0x56/0x80 [ 50.428635] do_syscall_64+0x309/0x430 [ 50.432497] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 50.437656] ================================================================== [ 50.444985] Disabling lock debugging due to kernel taint [ 50.450407] Kernel panic - not syncing: panic_on_warn set ... [ 50.450407] [ 50.457751] CPU: 0 PID: 3514 Comm: syzkaller031167 Tainted: G B 4.16.0+ #83 [ 50.466041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.475377] Call Trace: [ 50.477940] [ 50.480075] dump_stack+0x185/0x1d0 [ 50.483679] panic+0x39d/0x940 [ 50.486858] ? __netif_receive_skb_core+0x4630/0x4a80 [ 50.492029] kmsan_report+0x238/0x240 [ 50.495807] __msan_warning_32+0x6c/0xb0 [ 50.499843] __netif_receive_skb_core+0x4630/0x4a80 [ 50.504844] ? kmsan_internal_memset_shadow_inline+0xd0/0xd0 [ 50.510630] process_backlog+0x62d/0xe20 [ 50.514669] ? rps_trigger_softirq+0x2f0/0x2f0 [ 50.519228] net_rx_action+0x7c1/0x1a70 [ 50.523181] ? net_tx_action+0xab0/0xab0 [ 50.527220] __do_softirq+0x56d/0x93d [ 50.530998] do_softirq_own_stack+0x2a/0x40 [ 50.535290] [ 50.537506] __local_bh_enable_ip+0x114/0x140 [ 50.541980] local_bh_enable+0x36/0x40 [ 50.545844] __dev_queue_xmit+0x2a31/0x2b60 [ 50.550145] dev_queue_xmit+0x4b/0x60 [ 50.553920] ? __netdev_pick_tx+0xb60/0xb60 [ 50.558222] packet_sendmsg+0x7c57/0x8a10 [ 50.562353] ? kmsan_set_origin_inline+0x6b/0x120 [ 50.567169] ? __msan_poison_alloca+0x15c/0x1d0 [ 50.571813] ? mmdrop+0x3f/0xd0 [ 50.575154] ? balance_callback+0x48/0x250 [ 50.579359] ? finish_task_switch+0xfe/0x230 [ 50.583750] ? compat_packet_setsockopt+0x360/0x360 [ 50.588843] sock_write_iter+0x3b9/0x470 [ 50.592901] ? sock_read_iter+0x480/0x480 [ 50.597044] do_iter_readv_writev+0x7bb/0x970 [ 50.601529] ? sock_read_iter+0x480/0x480 [ 50.605663] do_iter_write+0x30d/0xd40 [ 50.609534] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 50.614976] do_writev+0x3c9/0x830 [ 50.618521] ? syscall_return_slowpath+0xe9/0x700 [ 50.623356] SYSC_writev+0x9b/0xb0 [ 50.626874] SyS_writev+0x56/0x80 [ 50.630308] do_syscall_64+0x309/0x430 [ 50.634190] ? SYSC_readv+0xb0/0xb0 [ 50.637808] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 50.643336] RIP: 0033:0x43ffb9 [ 50.646515] RSP: 002b:00007ffd42187708 EFLAGS: 00000217 ORIG_RAX: 0000000000000014 [ 50.654215] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043ffb9 [ 50.661482] RDX: 0000000000000001 RSI: 00000000200010c0 RDI: 0000000000000003 [ 50.668755] RBP: 00000000006ca018 R08: 00000000004002c8 R09: 00000000004002c8 [ 50.676026] R10: 00000000004002c8 R11: 0000000000000217 R12: 00000000004018e0 [ 50.683305] R13: 0000000000401970 R14: 0000000000000000 R15: 0000000000000000 [ 50.691123] Dumping ftrace buffer: [ 50.694664] (ftrace buffer empty) [ 50.698374] Kernel Offset: disabled [ 50.701983] Rebooting in 86400 seconds..