[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 29.663401] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 34.399977] random: sshd: uninitialized urandom read (32 bytes read) [ 34.824969] random: sshd: uninitialized urandom read (32 bytes read) [ 35.895396] random: sshd: uninitialized urandom read (32 bytes read) [ 36.109218] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.61' (ECDSA) to the list of known hosts. [ 41.624800] random: sshd: uninitialized urandom read (32 bytes read) executing program executing program executing program executing program [ 41.734262] ================================================================== [ 41.741689] BUG: KMSAN: uninit-value in fib4_rule_match+0x6eb/0x740 [ 41.748084] CPU: 1 PID: 4523 Comm: syz-executor867 Not tainted 4.17.0-rc5+ #101 [ 41.755512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 41.764849] Call Trace: [ 41.767411] [ 41.769544] dump_stack+0x185/0x1d0 [ 41.773166] ? fib4_rule_match+0x6eb/0x740 [ 41.777388] kmsan_report+0x149/0x260 [ 41.781181] __msan_warning_32+0x6e/0xc0 [ 41.785223] fib4_rule_match+0x6eb/0x740 [ 41.789265] ? fib4_rule_suppress+0x450/0x450 [ 41.793748] fib_rules_lookup+0xb0c/0xe50 [ 41.797975] __fib_lookup+0x1bc/0x360 [ 41.801768] fib_validate_source+0xc23/0x1d50 [ 41.806257] ip_route_input_rcu+0x3592/0x6280 [ 41.810741] ? __inet_lookup_established+0xb4d/0xbb0 [ 41.815833] ip_route_input_noref+0x10e/0x140 [ 41.820317] ip_rcv_finish+0x631/0x1d00 [ 41.824277] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 41.829623] ? nf_hook_slow+0x36f/0x3d0 [ 41.833584] ip_rcv+0x118f/0x16d0 [ 41.837031] ? ip_rcv+0x16d0/0x16d0 [ 41.840658] __netif_receive_skb_core+0x47df/0x4a90 [ 41.845662] ? ip_local_deliver_finish+0xec0/0xec0 [ 41.850591] netif_receive_skb_internal+0x49d/0x630 [ 41.855611] napi_gro_receive+0x6a2/0xb50 [ 41.859758] receive_buf+0x4be2/0x6700 [ 41.863635] ? kmsan_set_origin+0x9e/0x160 [ 41.867857] virtnet_poll+0x98c/0x1520 [ 41.871725] ? kmsan_set_origin_inline+0x6b/0x120 [ 41.876553] ? refill_work+0x2c0/0x2c0 [ 41.880429] net_rx_action+0x7c1/0x1a70 [ 41.884392] ? net_tx_action+0xab0/0xab0 [ 41.888445] __do_softirq+0x56d/0x93d [ 41.892230] irq_exit+0x202/0x240 [ 41.895665] exiting_irq+0xe/0x10 [ 41.899099] smp_apic_timer_interrupt+0x64/0x90 [ 41.903748] apic_timer_interrupt+0xf/0x20 [ 41.907957] [ 41.910175] RIP: 0010:__msan_poison_alloca+0x14c/0x1d0 [ 41.915427] RSP: 0018:ffff8801a9cff140 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 41.923119] RAX: 0000000092a00096 RBX: 0000000092a00096 RCX: ffff8801a9cff180 [ 41.930392] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000000047d06839 [ 41.937654] RBP: ffff8801a9cff1d8 R08: 0000000001080020 R09: 0000000000000002 [ 41.944909] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000000000 [ 41.952173] R13: ffffffff8af44350 R14: 0000000000000246 R15: ffff8801ce511d40 [ 41.959444] ? notify_rule_change+0x257/0x460 [ 41.963936] ? fib_nl_fill_rule+0x178/0x1f50 [ 41.968327] ? notify_rule_change+0x257/0x460 [ 41.972808] ? notify_rule_change+0x257/0x460 [ 41.977289] fib_nl_fill_rule+0x178/0x1f50 [ 41.981527] notify_rule_change+0x257/0x460 [ 41.985857] fib_nl_newrule+0x47d1/0x49b0 [ 41.989997] ? kmsan_set_origin_inline+0x6b/0x120 [ 41.994842] ? _cond_resched+0x3c/0xd0 [ 41.998719] ? fib_rules_seq_read+0x410/0x410 [ 42.003213] rtnetlink_rcv_msg+0xa32/0x1560 [ 42.007524] ? do_syscall_64+0x154/0x220 [ 42.011573] ? __x64_sys_sendmsg+0x331/0x460 [ 42.015970] ? do_syscall_64+0x154/0x220 [ 42.020022] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 42.025383] ? __msan_poison_alloca+0x15c/0x1d0 [ 42.030046] ? _raw_spin_unlock_bh+0x57/0x70 [ 42.034460] ? __local_bh_enable_ip+0x3b/0x140 [ 42.039038] ? _raw_spin_unlock_bh+0x57/0x70 [ 42.043454] ? kmsan_set_origin_inline+0x6b/0x120 [ 42.048281] ? kmsan_set_origin+0x9e/0x160 [ 42.052506] netlink_rcv_skb+0x378/0x600 [ 42.056550] ? rtnetlink_bind+0x120/0x120 [ 42.060681] rtnetlink_rcv+0x50/0x60 [ 42.064379] netlink_unicast+0x166b/0x1740 [ 42.068598] ? rtnetlink_net_exit+0xa0/0xa0 [ 42.072904] netlink_sendmsg+0x1072/0x1370 [ 42.077127] ? netlink_getsockopt+0xc80/0xc80 [ 42.081611] ___sys_sendmsg+0xec0/0x1310 [ 42.085662] ? __fdget+0x4e/0x60 [ 42.089019] ? __fget_light+0x56/0x710 [ 42.092897] ? __fdget+0x4e/0x60 [ 42.096244] ? __fget_light+0x1dc/0x710 [ 42.100224] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 42.105571] ? __fget_light+0x1f5/0x710 [ 42.109531] __x64_sys_sendmsg+0x331/0x460 [ 42.113772] do_syscall_64+0x154/0x220 [ 42.117641] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 42.122824] RIP: 0033:0x440049 [ 42.125994] RSP: 002b:00007ffdd28a01f8 EFLAGS: 00000217 ORIG_RAX: 000000000000002e [ 42.133691] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440049 [ 42.140946] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000009 [ 42.148198] RBP: 00000000006ca018 R08: 0000000000000000 R09: 0000000000000000 [ 42.155471] R10: 0000000000000000 R11: 0000000000000217 R12: 0000000000401970 [ 42.162728] R13: 0000000000401a00 R14: 0000000000000000 R15: 0000000000000000 [ 42.169998] [ 42.171629] Local variable description: ----fl4.i@fib_validate_source [ 42.178181] Variable was created at: [ 42.181882] fib_validate_source+0x127/0x1d50 [ 42.186370] ip_route_input_rcu+0x3592/0x6280 [ 42.190841] ================================================================== [ 42.198191] Disabling lock debugging due to kernel taint [ 42.203626] Kernel panic - not syncing: panic_on_warn set ... [ 42.203626] [ 42.210986] CPU: 1 PID: 4523 Comm: syz-executor867 Tainted: G B 4.17.0-rc5+ #101 [ 42.219812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 42.229152] Call Trace: [ 42.231722] [ 42.233860] dump_stack+0x185/0x1d0 [ 42.237480] panic+0x39d/0x940 [ 42.240661] ? fib4_rule_match+0x6eb/0x740 [ 42.244876] kmsan_report+0x260/0x260 [ 42.248656] __msan_warning_32+0x6e/0xc0 [ 42.252698] fib4_rule_match+0x6eb/0x740 [ 42.256739] ? fib4_rule_suppress+0x450/0x450 [ 42.261216] fib_rules_lookup+0xb0c/0xe50 [ 42.265350] __fib_lookup+0x1bc/0x360 [ 42.269143] fib_validate_source+0xc23/0x1d50 [ 42.273634] ip_route_input_rcu+0x3592/0x6280 [ 42.278133] ? __inet_lookup_established+0xb4d/0xbb0 [ 42.283222] ip_route_input_noref+0x10e/0x140 [ 42.287702] ip_rcv_finish+0x631/0x1d00 [ 42.291659] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 42.297008] ? nf_hook_slow+0x36f/0x3d0 [ 42.300975] ip_rcv+0x118f/0x16d0 [ 42.304412] ? ip_rcv+0x16d0/0x16d0 [ 42.308037] __netif_receive_skb_core+0x47df/0x4a90 [ 42.313062] ? ip_local_deliver_finish+0xec0/0xec0 [ 42.317993] netif_receive_skb_internal+0x49d/0x630 [ 42.323018] napi_gro_receive+0x6a2/0xb50 [ 42.327168] receive_buf+0x4be2/0x6700 [ 42.331049] ? kmsan_set_origin+0x9e/0x160 [ 42.335285] virtnet_poll+0x98c/0x1520 [ 42.339155] ? kmsan_set_origin_inline+0x6b/0x120 [ 42.343991] ? refill_work+0x2c0/0x2c0 [ 42.347864] net_rx_action+0x7c1/0x1a70 [ 42.351825] ? net_tx_action+0xab0/0xab0 [ 42.355881] __do_softirq+0x56d/0x93d [ 42.359674] irq_exit+0x202/0x240 [ 42.363109] exiting_irq+0xe/0x10 [ 42.366631] smp_apic_timer_interrupt+0x64/0x90 [ 42.371280] apic_timer_interrupt+0xf/0x20 [ 42.375492] [ 42.377713] RIP: 0010:__msan_poison_alloca+0x14c/0x1d0 [ 42.382969] RSP: 0018:ffff8801a9cff140 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 42.390662] RAX: 0000000092a00096 RBX: 0000000092a00096 RCX: ffff8801a9cff180 [ 42.397919] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000000047d06839 [ 42.405180] RBP: ffff8801a9cff1d8 R08: 0000000001080020 R09: 0000000000000002 [ 42.412438] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000000000 [ 42.419694] R13: ffffffff8af44350 R14: 0000000000000246 R15: ffff8801ce511d40 [ 42.426963] ? notify_rule_change+0x257/0x460 [ 42.431444] ? fib_nl_fill_rule+0x178/0x1f50 [ 42.435837] ? notify_rule_change+0x257/0x460 [ 42.440321] ? notify_rule_change+0x257/0x460 [ 42.444804] fib_nl_fill_rule+0x178/0x1f50 [ 42.449036] notify_rule_change+0x257/0x460 [ 42.453351] fib_nl_newrule+0x47d1/0x49b0 [ 42.457490] ? kmsan_set_origin_inline+0x6b/0x120 [ 42.462318] ? _cond_resched+0x3c/0xd0 [ 42.466192] ? fib_rules_seq_read+0x410/0x410 [ 42.470669] rtnetlink_rcv_msg+0xa32/0x1560 [ 42.475008] ? do_syscall_64+0x154/0x220 [ 42.479074] ? __x64_sys_sendmsg+0x331/0x460 [ 42.483468] ? do_syscall_64+0x154/0x220 [ 42.487512] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 42.492857] ? __msan_poison_alloca+0x15c/0x1d0 [ 42.497510] ? _raw_spin_unlock_bh+0x57/0x70 [ 42.501910] ? __local_bh_enable_ip+0x3b/0x140 [ 42.506476] ? _raw_spin_unlock_bh+0x57/0x70 [ 42.510882] ? kmsan_set_origin_inline+0x6b/0x120 [ 42.515718] ? kmsan_set_origin+0x9e/0x160 [ 42.519944] netlink_rcv_skb+0x378/0x600 [ 42.523990] ? rtnetlink_bind+0x120/0x120 [ 42.528143] rtnetlink_rcv+0x50/0x60 [ 42.531842] netlink_unicast+0x166b/0x1740 [ 42.536064] ? rtnetlink_net_exit+0xa0/0xa0 [ 42.540370] netlink_sendmsg+0x1072/0x1370 [ 42.544588] ? netlink_getsockopt+0xc80/0xc80 [ 42.549073] ___sys_sendmsg+0xec0/0x1310 [ 42.553118] ? __fdget+0x4e/0x60 [ 42.556466] ? __fget_light+0x56/0x710 [ 42.560330] ? __fdget+0x4e/0x60 [ 42.563674] ? __fget_light+0x1dc/0x710 [ 42.567632] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 42.572976] ? __fget_light+0x1f5/0x710 [ 42.576941] __x64_sys_sendmsg+0x331/0x460 [ 42.581160] do_syscall_64+0x154/0x220 [ 42.585043] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 42.590232] RIP: 0033:0x440049 [ 42.593411] RSP: 002b:00007ffdd28a01f8 EFLAGS: 00000217 ORIG_RAX: 000000000000002e [ 42.601102] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440049 [ 42.608363] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000009 [ 42.615620] RBP: 00000000006ca018 R08: 0000000000000000 R09: 0000000000000000 [ 42.622882] R10: 0000000000000000 R11: 0000000000000217 R12: 0000000000401970 [ 42.630147] R13: 0000000000401a00 R14: 0000000000000000 R15: 0000000000000000 [ 42.637911] Dumping ftrace buffer: [ 42.641430] (ftrace buffer empty) [ 42.645116] Kernel Offset: disabled [ 42.648720] Rebooting in 86400 seconds..