INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.12' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 46.414701] ================================================================== [ 46.422098] BUG: KMSAN: uninit-value in __skb_flow_dissect+0x401f/0x6580 [ 46.428917] CPU: 0 PID: 3574 Comm: syzkaller776093 Not tainted 4.16.0+ #84 [ 46.435901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 46.445242] Call Trace: [ 46.447813] dump_stack+0x185/0x1d0 [ 46.451424] ? __skb_flow_dissect+0x401f/0x6580 [ 46.456072] kmsan_report+0x142/0x240 [ 46.459852] __msan_warning_32+0x6c/0xb0 [ 46.463891] __skb_flow_dissect+0x401f/0x6580 [ 46.468369] __skb_get_hash_symmetric+0x10b/0x230 [ 46.473187] packet_rcv_fanout+0x38f/0x8d0 [ 46.477397] ? packet_direct_xmit+0xbf0/0xbf0 [ 46.481870] dev_queue_xmit_nit+0x111a/0x11e0 [ 46.486346] dev_hard_start_xmit+0x27c/0xc70 [ 46.490735] __dev_queue_xmit+0x22d9/0x2b60 [ 46.495048] dev_queue_xmit+0x4b/0x60 [ 46.498825] neigh_resolve_output+0xac6/0xb60 [ 46.503325] ? neigh_event_ns+0x360/0x360 [ 46.507452] ip_finish_output2+0x1238/0x1380 [ 46.511842] ip_finish_output+0xcb0/0xff0 [ 46.515971] ip_output+0x502/0x5c0 [ 46.519498] ? ip_mc_finish_output+0x3b0/0x3b0 [ 46.524061] ? ip_finish_output+0xff0/0xff0 [ 46.528359] ip_send_skb+0x5f3/0x820 [ 46.532060] ? __ip_local_out+0x5b0/0x5b0 [ 46.536215] ip_push_pending_frames+0x105/0x170 [ 46.540868] raw_sendmsg+0x2960/0x3ed0 [ 46.544738] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 46.550182] ? compat_raw_ioctl+0x100/0x100 [ 46.554478] inet_sendmsg+0x48d/0x740 [ 46.558264] ? security_socket_sendmsg+0x9e/0x210 [ 46.563086] ? inet_getname+0x500/0x500 [ 46.567041] SYSC_sendto+0x6c3/0x7e0 [ 46.570736] SyS_sendto+0x8a/0xb0 [ 46.574177] do_syscall_64+0x309/0x430 [ 46.578042] ? SYSC_getpeername+0x560/0x560 [ 46.582340] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 46.587506] RIP: 0033:0x43ffc9 [ 46.590669] RSP: 002b:00007fffded673e8 EFLAGS: 00000217 ORIG_RAX: 000000000000002c [ 46.598352] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043ffc9 [ 46.605600] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 0000000000000004 [ 46.612847] RBP: 00000000006ca018 R08: 0000000020000140 R09: 0000000000000010 [ 46.620095] R10: 0000000000000000 R11: 0000000000000217 R12: 00000000004018f0 [ 46.627342] R13: 0000000000401980 R14: 0000000000000000 R15: 0000000000000000 [ 46.634590] [ 46.636190] Uninit was stored to memory at: [ 46.640585] kmsan_internal_chain_origin+0x12b/0x210 [ 46.645662] kmsan_memcpy_origins+0x11d/0x170 [ 46.650133] __msan_memcpy+0x19f/0x1f0 [ 46.653996] skb_copy_bits+0x63a/0xdb0 [ 46.657945] __skb_flow_dissect+0x3931/0x6580 [ 46.662414] __skb_get_hash_symmetric+0x10b/0x230 [ 46.667240] packet_rcv_fanout+0x38f/0x8d0 [ 46.671458] dev_queue_xmit_nit+0x111a/0x11e0 [ 46.675927] dev_hard_start_xmit+0x27c/0xc70 [ 46.680312] __dev_queue_xmit+0x22d9/0x2b60 [ 46.684609] dev_queue_xmit+0x4b/0x60 [ 46.688384] neigh_resolve_output+0xac6/0xb60 [ 46.692867] ip_finish_output2+0x1238/0x1380 [ 46.697258] ip_finish_output+0xcb0/0xff0 [ 46.701379] ip_output+0x502/0x5c0 [ 46.704891] ip_send_skb+0x5f3/0x820 [ 46.708578] ip_push_pending_frames+0x105/0x170 [ 46.713220] raw_sendmsg+0x2960/0x3ed0 [ 46.717083] inet_sendmsg+0x48d/0x740 [ 46.720863] SYSC_sendto+0x6c3/0x7e0 [ 46.724552] SyS_sendto+0x8a/0xb0 [ 46.727987] do_syscall_64+0x309/0x430 [ 46.731851] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 46.737013] Uninit was created at: [ 46.740529] kmsan_alloc_meta_for_pages+0x161/0x3a0 [ 46.745519] kmsan_alloc_page+0x82/0xe0 [ 46.749474] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 46.754202] alloc_pages_current+0x6b5/0x970 [ 46.758585] skb_page_frag_refill+0x3ba/0x5e0 [ 46.763053] sk_page_frag_refill+0xa4/0x340 [ 46.767352] __ip_append_data+0x107e/0x3d10 [ 46.771647] ip_append_data+0x2fb/0x440 [ 46.775600] raw_sendmsg+0x287b/0x3ed0 [ 46.779465] inet_sendmsg+0x48d/0x740 [ 46.783251] SYSC_sendto+0x6c3/0x7e0 [ 46.786939] SyS_sendto+0x8a/0xb0 [ 46.790365] do_syscall_64+0x309/0x430 [ 46.794232] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 46.799392] ================================================================== [ 46.806730] Disabling lock debugging due to kernel taint [ 46.812166] Kernel panic - not syncing: panic_on_warn set ... [ 46.812166] [ 46.819510] CPU: 0 PID: 3574 Comm: syzkaller776093 Tainted: G B 4.16.0+ #84 [ 46.827800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 46.837128] Call Trace: [ 46.839701] dump_stack+0x185/0x1d0 [ 46.843311] panic+0x39d/0x940 [ 46.846489] ? __skb_flow_dissect+0x401f/0x6580 [ 46.851133] kmsan_report+0x238/0x240 [ 46.854912] __msan_warning_32+0x6c/0xb0 [ 46.858948] __skb_flow_dissect+0x401f/0x6580 [ 46.863430] __skb_get_hash_symmetric+0x10b/0x230 [ 46.868252] packet_rcv_fanout+0x38f/0x8d0 [ 46.872467] ? packet_direct_xmit+0xbf0/0xbf0 [ 46.876963] dev_queue_xmit_nit+0x111a/0x11e0 [ 46.881437] dev_hard_start_xmit+0x27c/0xc70 [ 46.885827] __dev_queue_xmit+0x22d9/0x2b60 [ 46.890130] dev_queue_xmit+0x4b/0x60 [ 46.893913] neigh_resolve_output+0xac6/0xb60 [ 46.898386] ? neigh_event_ns+0x360/0x360 [ 46.902510] ip_finish_output2+0x1238/0x1380 [ 46.906898] ip_finish_output+0xcb0/0xff0 [ 46.911026] ip_output+0x502/0x5c0 [ 46.914540] ? ip_mc_finish_output+0x3b0/0x3b0 [ 46.919099] ? ip_finish_output+0xff0/0xff0 [ 46.923393] ip_send_skb+0x5f3/0x820 [ 46.927081] ? __ip_local_out+0x5b0/0x5b0 [ 46.931204] ip_push_pending_frames+0x105/0x170 [ 46.935866] raw_sendmsg+0x2960/0x3ed0 [ 46.939735] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 46.945167] ? compat_raw_ioctl+0x100/0x100 [ 46.949462] inet_sendmsg+0x48d/0x740 [ 46.953243] ? security_socket_sendmsg+0x9e/0x210 [ 46.958069] ? inet_getname+0x500/0x500 [ 46.962024] SYSC_sendto+0x6c3/0x7e0 [ 46.965732] SyS_sendto+0x8a/0xb0 [ 46.969164] do_syscall_64+0x309/0x430 [ 46.973032] ? SYSC_getpeername+0x560/0x560 [ 46.977337] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 46.982505] RIP: 0033:0x43ffc9 [ 46.985668] RSP: 002b:00007fffded673e8 EFLAGS: 00000217 ORIG_RAX: 000000000000002c [ 46.993353] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043ffc9 [ 47.000600] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 0000000000000004 [ 47.007854] RBP: 00000000006ca018 R08: 0000000020000140 R09: 0000000000000010 [ 47.015113] R10: 0000000000000000 R11: 0000000000000217 R12: 00000000004018f0 [ 47.022357] R13: 0000000000401980 R14: 0000000000000000 R15: 0000000000000000 [ 47.030005] Dumping ftrace buffer: [ 47.033532] (ftrace buffer empty) [ 47.037219] Kernel Offset: disabled [ 47.040822] Rebooting in 86400 seconds..