INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.5' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 31.550868] ================================================================== [ 31.558263] BUG: KMSAN: uninit-value in crc32_le+0x4c2/0xcd0 [ 31.564055] CPU: 1 PID: 3580 Comm: syzkaller067053 Not tainted 4.16.0+ #82 [ 31.571055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 31.580387] Call Trace: [ 31.582960] dump_stack+0x185/0x1d0 [ 31.586565] ? crc32_le+0x4c2/0xcd0 [ 31.590171] kmsan_report+0x142/0x240 [ 31.593951] __msan_warning_32+0x6c/0xb0 [ 31.597991] crc32_le+0x4c2/0xcd0 [ 31.601429] crc32_pclmul_le+0x1e7/0x340 [ 31.605490] crc32_pclmul_finup+0xc4/0x130 [ 31.609706] ? crc32_pclmul_final+0xd0/0xd0 [ 31.614007] shash_ahash_finup+0x468/0xa30 [ 31.618224] shash_ahash_digest+0x5c6/0x600 [ 31.622529] shash_async_digest+0x11c/0x1b0 [ 31.626830] crypto_ahash_op+0x89a/0xc10 [ 31.630875] ? __kmalloc+0x23c/0x350 [ 31.634564] ? shash_async_finup+0x1b0/0x1b0 [ 31.638949] ? shash_async_finup+0x1b0/0x1b0 [ 31.643345] crypto_ahash_digest+0xe4/0x160 [ 31.647649] hash_sendpage+0xb40/0xe10 [ 31.651521] ? hash_recvmsg+0xd50/0xd50 [ 31.655474] sock_sendpage+0x1de/0x2c0 [ 31.659369] pipe_to_sendpage+0x31b/0x430 [ 31.663523] ? sock_fasync+0x2b0/0x2b0 [ 31.667398] ? propagate_umount+0x3a30/0x3a30 [ 31.671886] __splice_from_pipe+0x49a/0xf30 [ 31.676195] ? generic_splice_sendpage+0x2a0/0x2a0 [ 31.681108] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 31.686453] generic_splice_sendpage+0x1c6/0x2a0 [ 31.691191] ? iter_file_splice_write+0x1710/0x1710 [ 31.696186] ? iter_file_splice_write+0x1710/0x1710 [ 31.701179] direct_splice_actor+0x19b/0x200 [ 31.705566] splice_direct_to_actor+0x764/0x1040 [ 31.710296] ? do_splice_direct+0x540/0x540 [ 31.714602] ? security_file_permission+0x28f/0x4b0 [ 31.719598] ? rw_verify_area+0x35e/0x580 [ 31.723742] do_splice_direct+0x335/0x540 [ 31.727873] do_sendfile+0x1067/0x1e40 [ 31.731744] SYSC_sendfile64+0x1b3/0x300 [ 31.735784] SyS_sendfile64+0x64/0x90 [ 31.739560] do_syscall_64+0x309/0x430 [ 31.743427] ? SYSC_sendfile+0x320/0x320 [ 31.747468] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 31.752637] RIP: 0033:0x440c19 [ 31.755800] RSP: 002b:00000000007dff78 EFLAGS: 00000217 ORIG_RAX: 0000000000000028 [ 31.763483] RAX: ffffffffffffffda RBX: 00007ffee9d332a0 RCX: 0000000000440c19 [ 31.770733] RDX: 0000000020000200 RSI: 0000000000000005 RDI: 0000000000000004 [ 31.777983] RBP: 0000000000000000 R08: 0000000120080522 R09: 0000000120080522 [ 31.785241] R10: 0000000000000008 R11: 0000000000000217 R12: 00000000004023b0 [ 31.792487] R13: 0000000000402440 R14: 0000000000000000 R15: 0000000000000000 [ 31.799733] [ 31.801334] Uninit was created at: [ 31.804855] kmsan_alloc_meta_for_pages+0x161/0x3a0 [ 31.809848] kmsan_alloc_page+0x82/0xe0 [ 31.813802] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 31.818531] alloc_pages_vma+0xcc8/0x1800 [ 31.822657] shmem_alloc_and_acct_page+0x6d5/0x1000 [ 31.827664] shmem_getpage_gfp+0x35db/0x5770 [ 31.832054] shmem_fallocate+0xde2/0x1610 [ 31.836185] vfs_fallocate+0x9dc/0xde0 [ 31.840054] SYSC_fallocate+0x119/0x1d0 [ 31.844015] SyS_fallocate+0x64/0x90 [ 31.847722] do_syscall_64+0x309/0x430 [ 31.851587] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 31.856759] ================================================================== [ 31.864094] Disabling lock debugging due to kernel taint [ 31.869525] Kernel panic - not syncing: panic_on_warn set ... [ 31.869525] [ 31.876865] CPU: 1 PID: 3580 Comm: syzkaller067053 Tainted: G B 4.16.0+ #82 [ 31.885165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 31.894497] Call Trace: [ 31.897069] dump_stack+0x185/0x1d0 [ 31.900680] panic+0x39d/0x940 [ 31.903864] ? crc32_le+0x4c2/0xcd0 [ 31.907467] kmsan_report+0x238/0x240 [ 31.911251] __msan_warning_32+0x6c/0xb0 [ 31.915290] crc32_le+0x4c2/0xcd0 [ 31.918724] crc32_pclmul_le+0x1e7/0x340 [ 31.922761] crc32_pclmul_finup+0xc4/0x130 [ 31.926972] ? crc32_pclmul_final+0xd0/0xd0 [ 31.931274] shash_ahash_finup+0x468/0xa30 [ 31.935487] shash_ahash_digest+0x5c6/0x600 [ 31.939789] shash_async_digest+0x11c/0x1b0 [ 31.944101] crypto_ahash_op+0x89a/0xc10 [ 31.948154] ? __kmalloc+0x23c/0x350 [ 31.951843] ? shash_async_finup+0x1b0/0x1b0 [ 31.956235] ? shash_async_finup+0x1b0/0x1b0 [ 31.960621] crypto_ahash_digest+0xe4/0x160 [ 31.964921] hash_sendpage+0xb40/0xe10 [ 31.968785] ? hash_recvmsg+0xd50/0xd50 [ 31.972737] sock_sendpage+0x1de/0x2c0 [ 31.976603] pipe_to_sendpage+0x31b/0x430 [ 31.980728] ? sock_fasync+0x2b0/0x2b0 [ 31.984596] ? propagate_umount+0x3a30/0x3a30 [ 31.989071] __splice_from_pipe+0x49a/0xf30 [ 31.993374] ? generic_splice_sendpage+0x2a0/0x2a0 [ 31.998286] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 32.003643] generic_splice_sendpage+0x1c6/0x2a0 [ 32.008383] ? iter_file_splice_write+0x1710/0x1710 [ 32.013385] ? iter_file_splice_write+0x1710/0x1710 [ 32.018382] direct_splice_actor+0x19b/0x200 [ 32.022776] splice_direct_to_actor+0x764/0x1040 [ 32.027521] ? do_splice_direct+0x540/0x540 [ 32.031837] ? security_file_permission+0x28f/0x4b0 [ 32.036840] ? rw_verify_area+0x35e/0x580 [ 32.040968] do_splice_direct+0x335/0x540 [ 32.045183] do_sendfile+0x1067/0x1e40 [ 32.049053] SYSC_sendfile64+0x1b3/0x300 [ 32.053092] SyS_sendfile64+0x64/0x90 [ 32.056872] do_syscall_64+0x309/0x430 [ 32.060744] ? SYSC_sendfile+0x320/0x320 [ 32.064785] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 32.069950] RIP: 0033:0x440c19 [ 32.073115] RSP: 002b:00000000007dff78 EFLAGS: 00000217 ORIG_RAX: 0000000000000028 [ 32.080797] RAX: ffffffffffffffda RBX: 00007ffee9d332a0 RCX: 0000000000440c19 [ 32.088046] RDX: 0000000020000200 RSI: 0000000000000005 RDI: 0000000000000004 [ 32.095300] RBP: 0000000000000000 R08: 0000000120080522 R09: 0000000120080522 [ 32.102554] R10: 0000000000000008 R11: 0000000000000217 R12: 00000000004023b0 [ 32.109808] R13: 0000000000402440 R14: 0000000000000000 R15: 0000000000000000 [ 32.117680] Dumping ftrace buffer: [ 32.121201] (ftrace buffer empty) [ 32.124885] Kernel Offset: disabled [ 32.128483] Rebooting in 86400 seconds..