INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.40' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 30.638906] ================================================================== [ 30.646309] BUG: KMSAN: uninit-value in __udp4_lib_rcv+0x628/0x4740 [ 30.652783] CPU: 1 PID: 3573 Comm: syzkaller192717 Not tainted 4.16.0+ #83 [ 30.659769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 30.669100] Call Trace: [ 30.671660] [ 30.673791] dump_stack+0x185/0x1d0 [ 30.677400] ? __udp4_lib_rcv+0x628/0x4740 [ 30.681614] kmsan_report+0x142/0x240 [ 30.685392] __msan_warning_32+0x6c/0xb0 [ 30.689445] __udp4_lib_rcv+0x628/0x4740 [ 30.693506] ? raw_local_deliver+0x1462/0x1470 [ 30.698081] udp_rcv+0x5c/0x70 [ 30.701259] ? udp_v4_early_demux+0x1cd0/0x1cd0 [ 30.705907] ip_local_deliver_finish+0x6ed/0xd40 [ 30.710640] ip_local_deliver+0x43c/0x4e0 [ 30.714764] ? ip_local_deliver+0x4e0/0x4e0 [ 30.719063] ? ip_call_ra_chain+0x7b0/0x7b0 [ 30.723360] ip_rcv_finish+0x1253/0x16d0 [ 30.727398] ip_rcv+0x119d/0x16f0 [ 30.731277] ? ip_rcv+0x16f0/0x16f0 [ 30.734886] __netif_receive_skb_core+0x47cf/0x4a80 [ 30.739882] ? kmsan_internal_memset_shadow_inline+0xd0/0xd0 [ 30.745658] ? ip_local_deliver_finish+0xd40/0xd40 [ 30.750565] ? nci_rx_data_packet+0x131/0xc30 [ 30.755034] process_backlog+0x62d/0xe20 [ 30.759072] ? rps_trigger_softirq+0x2f0/0x2f0 [ 30.763634] net_rx_action+0x7c1/0x1a70 [ 30.767593] ? net_tx_action+0xab0/0xab0 [ 30.771651] __do_softirq+0x56d/0x93d [ 30.775436] do_softirq_own_stack+0x2a/0x40 [ 30.779729] [ 30.781947] __local_bh_enable_ip+0x114/0x140 [ 30.786425] local_bh_enable+0x36/0x40 [ 30.790295] ip_finish_output2+0x124e/0x1380 [ 30.794687] ip_finish_output+0xcb0/0xff0 [ 30.798816] ip_output+0x502/0x5c0 [ 30.802330] ? ip_mc_finish_output+0x3b0/0x3b0 [ 30.806892] ? ip_finish_output+0xff0/0xff0 [ 30.811208] ip_send_skb+0x5f3/0x820 [ 30.814911] ? __ip_local_out+0x5b0/0x5b0 [ 30.819040] ip_push_pending_frames+0x105/0x170 [ 30.823688] raw_sendmsg+0x2960/0x3ed0 [ 30.827556] ? kmsan_internal_unpoison_shadow+0x83/0xe0 [ 30.832907] ? compat_raw_ioctl+0x100/0x100 [ 30.837203] inet_sendmsg+0x48d/0x740 [ 30.840980] ? security_socket_sendmsg+0x9e/0x210 [ 30.845887] ? inet_getname+0x500/0x500 [ 30.849836] ___sys_sendmsg+0xec0/0x1310 [ 30.853896] ? do_huge_pmd_anonymous_page+0x19d5/0x2520 [ 30.859248] ? __fdget+0x4e/0x60 [ 30.862596] SYSC_sendmsg+0x2a3/0x3d0 [ 30.866378] SyS_sendmsg+0x54/0x80 [ 30.869902] do_syscall_64+0x309/0x430 [ 30.873766] ? ___sys_sendmsg+0x1310/0x1310 [ 30.878068] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 30.883233] RIP: 0033:0x43fe99 [ 30.886395] RSP: 002b:00007ffca5bf5be8 EFLAGS: 00000217 ORIG_RAX: 000000000000002e [ 30.894082] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043fe99 [ 30.901333] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 30.908579] RBP: 00000000006ca018 R08: 00000000004002c8 R09: 00000000004002c8 [ 30.915825] R10: 00000000004002c8 R11: 0000000000000217 R12: 00000000004017c0 [ 30.923070] R13: 0000000000401850 R14: 0000000000000000 R15: 0000000000000000 [ 30.933355] [ 30.934955] Uninit was stored to memory at: [ 30.939266] kmsan_internal_chain_origin+0x12b/0x210 [ 30.944345] kmsan_memcpy_origins+0x11d/0x170 [ 30.948826] __msan_memcpy+0x19f/0x1f0 [ 30.952693] skb_copy_bits+0x63a/0xdb0 [ 30.956555] __pskb_pull_tail+0x483/0x22e0 [ 30.960766] __udp4_lib_rcv+0x55f/0x4740 [ 30.964799] udp_rcv+0x5c/0x70 [ 30.967968] ip_local_deliver_finish+0x6ed/0xd40 [ 30.972699] ip_local_deliver+0x43c/0x4e0 [ 30.976822] ip_rcv_finish+0x1253/0x16d0 [ 30.980864] ip_rcv+0x119d/0x16f0 [ 30.984296] __netif_receive_skb_core+0x47cf/0x4a80 [ 30.989297] process_backlog+0x62d/0xe20 [ 30.993335] net_rx_action+0x7c1/0x1a70 [ 30.997310] __do_softirq+0x56d/0x93d [ 31.001084] Uninit was created at: [ 31.004600] kmsan_alloc_meta_for_pages+0x161/0x3a0 [ 31.009589] kmsan_alloc_page+0x82/0xe0 [ 31.013541] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 31.018270] alloc_pages_current+0x6b5/0x970 [ 31.022653] skb_page_frag_refill+0x3ba/0x5e0 [ 31.027121] sk_page_frag_refill+0xa4/0x340 [ 31.031422] __ip_append_data+0x107e/0x3d10 [ 31.035722] ip_append_data+0x2fb/0x440 [ 31.039670] raw_sendmsg+0x287b/0x3ed0 [ 31.043531] inet_sendmsg+0x48d/0x740 [ 31.047311] ___sys_sendmsg+0xec0/0x1310 [ 31.051347] SYSC_sendmsg+0x2a3/0x3d0 [ 31.055123] SyS_sendmsg+0x54/0x80 [ 31.058637] do_syscall_64+0x309/0x430 [ 31.062503] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 31.067662] ================================================================== [ 31.074990] Disabling lock debugging due to kernel taint [ 31.080414] Kernel panic - not syncing: panic_on_warn set ... [ 31.080414] [ 31.087753] CPU: 1 PID: 3573 Comm: syzkaller192717 Tainted: G B 4.16.0+ #83 [ 31.096042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 31.105368] Call Trace: [ 31.107928] [ 31.110066] dump_stack+0x185/0x1d0 [ 31.113674] panic+0x39d/0x940 [ 31.116852] ? __udp4_lib_rcv+0x628/0x4740 [ 31.121061] kmsan_report+0x238/0x240 [ 31.124836] __msan_warning_32+0x6c/0xb0 [ 31.128872] __udp4_lib_rcv+0x628/0x4740 [ 31.132915] ? raw_local_deliver+0x1462/0x1470 [ 31.137477] udp_rcv+0x5c/0x70 [ 31.140644] ? udp_v4_early_demux+0x1cd0/0x1cd0 [ 31.146006] ip_local_deliver_finish+0x6ed/0xd40 [ 31.150751] ip_local_deliver+0x43c/0x4e0 [ 31.154873] ? ip_local_deliver+0x4e0/0x4e0 [ 31.159171] ? ip_call_ra_chain+0x7b0/0x7b0 [ 31.163465] ip_rcv_finish+0x1253/0x16d0 [ 31.167521] ip_rcv+0x119d/0x16f0 [ 31.170947] ? ip_rcv+0x16f0/0x16f0 [ 31.174557] __netif_receive_skb_core+0x47cf/0x4a80 [ 31.179551] ? kmsan_internal_memset_shadow_inline+0xd0/0xd0 [ 31.185325] ? ip_local_deliver_finish+0xd40/0xd40 [ 31.190230] ? nci_rx_data_packet+0x131/0xc30 [ 31.194699] process_backlog+0x62d/0xe20 [ 31.198745] ? rps_trigger_softirq+0x2f0/0x2f0 [ 31.203300] net_rx_action+0x7c1/0x1a70 [ 31.207251] ? net_tx_action+0xab0/0xab0 [ 31.211289] __do_softirq+0x56d/0x93d [ 31.215067] do_softirq_own_stack+0x2a/0x40 [ 31.219360] [ 31.221575] __local_bh_enable_ip+0x114/0x140 [ 31.226050] local_bh_enable+0x36/0x40 [ 31.229911] ip_finish_output2+0x124e/0x1380 [ 31.234307] ip_finish_output+0xcb0/0xff0 [ 31.238433] ip_output+0x502/0x5c0 [ 31.241958] ? ip_mc_finish_output+0x3b0/0x3b0 [ 31.246532] ? ip_finish_output+0xff0/0xff0 [ 31.250831] ip_send_skb+0x5f3/0x820 [ 31.254521] ? __ip_local_out+0x5b0/0x5b0 [ 31.258644] ip_push_pending_frames+0x105/0x170 [ 31.263291] raw_sendmsg+0x2960/0x3ed0 [ 31.267163] ? kmsan_internal_unpoison_shadow+0x83/0xe0 [ 31.272533] ? compat_raw_ioctl+0x100/0x100 [ 31.276833] inet_sendmsg+0x48d/0x740 [ 31.280608] ? security_socket_sendmsg+0x9e/0x210 [ 31.285426] ? inet_getname+0x500/0x500 [ 31.289377] ___sys_sendmsg+0xec0/0x1310 [ 31.293416] ? do_huge_pmd_anonymous_page+0x19d5/0x2520 [ 31.298759] ? __fdget+0x4e/0x60 [ 31.302109] SYSC_sendmsg+0x2a3/0x3d0 [ 31.305890] SyS_sendmsg+0x54/0x80 [ 31.309416] do_syscall_64+0x309/0x430 [ 31.313279] ? ___sys_sendmsg+0x1310/0x1310 [ 31.317578] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 31.322742] RIP: 0033:0x43fe99 [ 31.325906] RSP: 002b:00007ffca5bf5be8 EFLAGS: 00000217 ORIG_RAX: 000000000000002e [ 31.333589] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043fe99 [ 31.340835] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 31.348079] RBP: 00000000006ca018 R08: 00000000004002c8 R09: 00000000004002c8 [ 31.355336] R10: 00000000004002c8 R11: 0000000000000217 R12: 00000000004017c0 [ 31.362585] R13: 0000000000401850 R14: 0000000000000000 R15: 0000000000000000 [ 31.370266] Dumping ftrace buffer: [ 31.373784] (ftrace buffer empty) [ 31.377465] Kernel Offset: disabled [ 31.381066] Rebooting in 86400 seconds..