[ OK ] Started OpenBSD Secure Shell server. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 134.975785][ T8417] sshd (8417) used greatest stack depth: 3904 bytes left Warning: Permanently added '10.128.0.54' (ECDSA) to the list of known hosts. executing program [ 143.448806][ T8445] ===================================================== [ 143.455800][ T8445] BUG: KMSAN: uninit-value in packet_rcv_fanout+0x2442/0x25c0 [ 143.463277][ T8445] CPU: 1 PID: 8445 Comm: sshd Not tainted 5.8.0-rc5-syzkaller #0 [ 143.471007][ T8445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 143.481331][ T8445] Call Trace: [ 143.484639][ T8445] dump_stack+0x1df/0x240 [ 143.488984][ T8445] kmsan_report+0xf7/0x1e0 [ 143.493414][ T8445] __msan_warning+0x58/0xa0 [ 143.497923][ T8445] packet_rcv_fanout+0x2442/0x25c0 [ 143.503047][ T8445] ? __skb_clone+0x939/0x970 [ 143.507645][ T8445] ? kmsan_get_metadata+0x11d/0x180 [ 143.512869][ T8445] ? kmsan_get_metadata+0x11d/0x180 [ 143.518078][ T8445] ? packet_direct_xmit+0x470/0x470 [ 143.523282][ T8445] dev_queue_xmit_nit+0x862/0x1280 [ 143.528431][ T8445] dev_hard_start_xmit+0x20c/0xa70 [ 143.533573][ T8445] sch_direct_xmit+0x580/0x1890 [ 143.538452][ T8445] __qdisc_run+0x155c/0x33a0 [ 143.543086][ T8445] __dev_queue_xmit+0x23b7/0x3b20 [ 143.548155][ T8445] dev_queue_xmit+0x4b/0x60 [ 143.552671][ T8445] ip_finish_output2+0x1fd8/0x24a0 [ 143.557782][ T8445] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 143.563854][ T8445] ? nf_ct_deliver_cached_events+0x511/0x6c0 [ 143.569867][ T8445] __ip_finish_output+0xaa7/0xd80 [ 143.574914][ T8445] ip_finish_output+0x166/0x410 [ 143.579779][ T8445] ip_output+0x593/0x680 [ 143.584045][ T8445] ? ip_mc_finish_output+0x6c0/0x6c0 [ 143.589335][ T8445] ? ip_finish_output+0x410/0x410 [ 143.594374][ T8445] __ip_queue_xmit+0x1b5c/0x21a0 [ 143.599318][ T8445] ? kmsan_set_origin_checked+0x95/0xf0 [ 143.604895][ T8445] ? kmsan_get_metadata+0x11d/0x180 [ 143.610113][ T8445] ? kmsan_get_metadata+0x11d/0x180 [ 143.615326][ T8445] ip_queue_xmit+0xcc/0xf0 [ 143.619761][ T8445] ? tcp_v4_fill_cb+0x580/0x580 [ 143.624617][ T8445] __tcp_transmit_skb+0x440e/0x6090 [ 143.629861][ T8445] tcp_write_xmit+0x30b1/0xb430 [ 143.634774][ T8445] ? kmsan_report+0x1c0/0x1e0 [ 143.639492][ T8445] __tcp_push_pending_frames+0x124/0x4e0 [ 143.645146][ T8445] tcp_push+0x6fa/0x8a0 [ 143.649325][ T8445] tcp_sendmsg_locked+0x5d90/0x6d00 [ 143.654629][ T8445] tcp_sendmsg+0xb2/0x100 [ 143.658963][ T8445] ? tcp_sendmsg_locked+0x6d00/0x6d00 [ 143.664345][ T8445] ? tcp_sendmsg_locked+0x6d00/0x6d00 [ 143.669717][ T8445] inet_sendmsg+0x178/0x2e0 [ 143.674253][ T8445] ? inet_send_prepare+0x600/0x600 [ 143.679370][ T8445] sock_write_iter+0x651/0x720 [ 143.684156][ T8445] ? sock_read_iter+0x760/0x760 [ 143.689009][ T8445] vfs_write+0xd98/0x1480 [ 143.693385][ T8445] ksys_write+0x267/0x450 [ 143.697738][ T8445] __se_sys_write+0x92/0xb0 [ 143.702254][ T8445] __x64_sys_write+0x4a/0x70 [ 143.706869][ T8445] do_syscall_64+0xb0/0x150 [ 143.711382][ T8445] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 143.717272][ T8445] RIP: 0033:0x7f87f521b970 [ 143.721675][ T8445] Code: Bad RIP value. [ 143.725733][ T8445] RSP: 002b:00007ffe1cbf1f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 143.734141][ T8445] RAX: ffffffffffffffda RBX: 0000000000000034 RCX: 00007f87f521b970 [ 143.742108][ T8445] RDX: 0000000000000034 RSI: 0000559aab5f5d5c RDI: 0000000000000003 [ 143.750074][ T8445] RBP: 0000559aab5e59a0 R08: 00007ffe1cbf9080 R09: 0000000000000070 [ 143.758039][ T8445] R10: 000000000000008f R11: 0000000000000246 R12: 0000000000000001 [ 143.766009][ T8445] R13: 00007ffe1cbf1fdf R14: 0000559aa9fb9be7 R15: 0000000000000003 [ 143.773992][ T8445] [ 143.776311][ T8445] Uninit was stored to memory at: [ 143.781346][ T8445] kmsan_internal_chain_origin+0xad/0x130 [ 143.787061][ T8445] __msan_chain_origin+0x50/0x90 [ 143.791999][ T8445] ___bpf_prog_run+0x6c64/0x97a0 [ 143.796935][ T8445] __bpf_prog_run32+0x101/0x170 [ 143.801782][ T8445] packet_rcv_fanout+0x51e/0x25c0 [ 143.806808][ T8445] dev_queue_xmit_nit+0x862/0x1280 [ 143.811922][ T8445] dev_hard_start_xmit+0x20c/0xa70 [ 143.817032][ T8445] sch_direct_xmit+0x580/0x1890 [ 143.821881][ T8445] __qdisc_run+0x155c/0x33a0 [ 143.826474][ T8445] __dev_queue_xmit+0x23b7/0x3b20 [ 143.831495][ T8445] dev_queue_xmit+0x4b/0x60 [ 143.835997][ T8445] ip_finish_output2+0x1fd8/0x24a0 [ 143.841106][ T8445] __ip_finish_output+0xaa7/0xd80 [ 143.846131][ T8445] ip_finish_output+0x166/0x410 [ 143.850977][ T8445] ip_output+0x593/0x680 [ 143.855219][ T8445] __ip_queue_xmit+0x1b5c/0x21a0 [ 143.860154][ T8445] ip_queue_xmit+0xcc/0xf0 [ 143.864568][ T8445] __tcp_transmit_skb+0x440e/0x6090 [ 143.869765][ T8445] tcp_write_xmit+0x30b1/0xb430 [ 143.874613][ T8445] __tcp_push_pending_frames+0x124/0x4e0 [ 143.880243][ T8445] tcp_push+0x6fa/0x8a0 [ 143.884401][ T8445] tcp_sendmsg_locked+0x5d90/0x6d00 [ 143.889597][ T8445] tcp_sendmsg+0xb2/0x100 [ 143.893926][ T8445] inet_sendmsg+0x178/0x2e0 [ 143.898430][ T8445] sock_write_iter+0x651/0x720 [ 143.903211][ T8445] vfs_write+0xd98/0x1480 [ 143.907539][ T8445] ksys_write+0x267/0x450 [ 143.911953][ T8445] __se_sys_write+0x92/0xb0 [ 143.916466][ T8445] __x64_sys_write+0x4a/0x70 [ 143.921055][ T8445] do_syscall_64+0xb0/0x150 [ 143.925561][ T8445] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 143.931439][ T8445] [ 143.933760][ T8445] Local variable ----regs@__bpf_prog_run32 created at: [ 143.940608][ T8445] __bpf_prog_run32+0x87/0x170 [ 143.945372][ T8445] __bpf_prog_run32+0x87/0x170 [ 143.950120][ T8445] ===================================================== [ 143.957039][ T8445] Disabling lock debugging due to kernel taint [ 143.963184][ T8445] Kernel panic - not syncing: panic_on_warn set ... [ 143.969785][ T8445] CPU: 1 PID: 8445 Comm: sshd Tainted: G B 5.8.0-rc5-syzkaller #0 [ 143.978882][ T8445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 143.988945][ T8445] Call Trace: [ 143.992250][ T8445] dump_stack+0x1df/0x240 [ 143.996596][ T8445] panic+0x3d5/0xc3e [ 144.000546][ T8445] kmsan_report+0x1df/0x1e0 [ 144.005061][ T8445] __msan_warning+0x58/0xa0 [ 144.009570][ T8445] packet_rcv_fanout+0x2442/0x25c0 [ 144.014712][ T8445] ? __skb_clone+0x939/0x970 [ 144.019314][ T8445] ? kmsan_get_metadata+0x11d/0x180 [ 144.024529][ T8445] ? kmsan_get_metadata+0x11d/0x180 [ 144.029736][ T8445] ? packet_direct_xmit+0x470/0x470 [ 144.034937][ T8445] dev_queue_xmit_nit+0x862/0x1280 [ 144.040089][ T8445] dev_hard_start_xmit+0x20c/0xa70 [ 144.045229][ T8445] sch_direct_xmit+0x580/0x1890 [ 144.050111][ T8445] __qdisc_run+0x155c/0x33a0 [ 144.054745][ T8445] __dev_queue_xmit+0x23b7/0x3b20 [ 144.059815][ T8445] dev_queue_xmit+0x4b/0x60 [ 144.064349][ T8445] ip_finish_output2+0x1fd8/0x24a0 [ 144.069464][ T8445] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 144.075537][ T8445] ? nf_ct_deliver_cached_events+0x511/0x6c0 [ 144.081556][ T8445] __ip_finish_output+0xaa7/0xd80 [ 144.086611][ T8445] ip_finish_output+0x166/0x410 [ 144.091481][ T8445] ip_output+0x593/0x680 [ 144.095752][ T8445] ? ip_mc_finish_output+0x6c0/0x6c0 [ 144.101043][ T8445] ? ip_finish_output+0x410/0x410 [ 144.106077][ T8445] __ip_queue_xmit+0x1b5c/0x21a0 [ 144.111023][ T8445] ? kmsan_set_origin_checked+0x95/0xf0 [ 144.116583][ T8445] ? kmsan_get_metadata+0x11d/0x180 [ 144.121803][ T8445] ? kmsan_get_metadata+0x11d/0x180 [ 144.127019][ T8445] ip_queue_xmit+0xcc/0xf0 [ 144.131450][ T8445] ? tcp_v4_fill_cb+0x580/0x580 [ 144.136322][ T8445] __tcp_transmit_skb+0x440e/0x6090 [ 144.141661][ T8445] tcp_write_xmit+0x30b1/0xb430 [ 144.146567][ T8445] ? kmsan_report+0x1c0/0x1e0 [ 144.151294][ T8445] __tcp_push_pending_frames+0x124/0x4e0 [ 144.156945][ T8445] tcp_push+0x6fa/0x8a0 [ 144.161125][ T8445] tcp_sendmsg_locked+0x5d90/0x6d00 [ 144.166418][ T8445] tcp_sendmsg+0xb2/0x100 [ 144.170754][ T8445] ? tcp_sendmsg_locked+0x6d00/0x6d00 [ 144.176122][ T8445] ? tcp_sendmsg_locked+0x6d00/0x6d00 [ 144.181514][ T8445] inet_sendmsg+0x178/0x2e0 [ 144.186033][ T8445] ? inet_send_prepare+0x600/0x600 [ 144.191147][ T8445] sock_write_iter+0x651/0x720 [ 144.195934][ T8445] ? sock_read_iter+0x760/0x760 [ 144.200804][ T8445] vfs_write+0xd98/0x1480 [ 144.205174][ T8445] ksys_write+0x267/0x450 [ 144.209523][ T8445] __se_sys_write+0x92/0xb0 [ 144.214038][ T8445] __x64_sys_write+0x4a/0x70 [ 144.218632][ T8445] do_syscall_64+0xb0/0x150 [ 144.223148][ T8445] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 144.229037][ T8445] RIP: 0033:0x7f87f521b970 [ 144.233440][ T8445] Code: Bad RIP value. [ 144.237498][ T8445] RSP: 002b:00007ffe1cbf1f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 144.245906][ T8445] RAX: ffffffffffffffda RBX: 0000000000000034 RCX: 00007f87f521b970 [ 144.253880][ T8445] RDX: 0000000000000034 RSI: 0000559aab5f5d5c RDI: 0000000000000003 [ 144.261853][ T8445] RBP: 0000559aab5e59a0 R08: 00007ffe1cbf9080 R09: 0000000000000070 [ 144.269821][ T8445] R10: 000000000000008f R11: 0000000000000246 R12: 0000000000000001 [ 144.277791][ T8445] R13: 00007ffe1cbf1fdf R14: 0000559aa9fb9be7 R15: 0000000000000003 [ 144.286722][ T8445] Kernel Offset: 0x2d000000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 144.298336][ T8445] Rebooting in 86400 seconds..