INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.22' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 37.131194] ================================================================== [ 37.138562] BUG: KMSAN: uninit-value in ipv6_frag_rcv+0xfa5/0x6970 [ 37.144858] CPU: 0 PID: 3580 Comm: syzkaller433171 Not tainted 4.16.0+ #82 [ 37.151838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 37.161162] Call Trace: [ 37.163715] [ 37.165843] dump_stack+0x185/0x1d0 [ 37.169441] ? ipv6_frag_rcv+0xfa5/0x6970 [ 37.173559] kmsan_report+0x142/0x240 [ 37.177336] __msan_warning_32+0x6c/0xb0 [ 37.181368] ipv6_frag_rcv+0xfa5/0x6970 [ 37.185315] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 37.190655] ? ipv6_frag_exit+0x90/0x90 [ 37.194603] ip6_input_finish+0xa62/0x2110 [ 37.198812] ? ip6table_filter_hook+0xb5/0xe0 [ 37.203281] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 37.208618] ip6_input+0x294/0x320 [ 37.212130] ? ip6_input+0x320/0x320 [ 37.215818] ? ipv6_rcv+0x26d0/0x26d0 [ 37.219588] ipv6_rcv+0x20ec/0x26d0 [ 37.223187] ? local_bh_enable+0x40/0x40 [ 37.227225] __netif_receive_skb_core+0x47cf/0x4a80 [ 37.232214] ? kmsan_internal_memset_shadow_inline+0xd0/0xd0 [ 37.237986] ? ip6_rcv_finish+0x4d0/0x4d0 [ 37.242106] process_backlog+0x62d/0xe20 [ 37.246141] ? rps_trigger_softirq+0x2f0/0x2f0 [ 37.250692] net_rx_action+0x7c1/0x1a70 [ 37.254640] ? net_tx_action+0xab0/0xab0 [ 37.258674] __do_softirq+0x56d/0x93d [ 37.262451] do_softirq_own_stack+0x2a/0x40 [ 37.266740] [ 37.268954] __local_bh_enable_ip+0x114/0x140 [ 37.273421] local_bh_enable+0x36/0x40 [ 37.277280] ip6_finish_output2+0x1b6c/0x1f20 [ 37.281751] ip6_finish_output+0xb3f/0xc00 [ 37.285957] ip6_output+0x597/0x6c0 [ 37.289557] ? ip6_output+0x6c0/0x6c0 [ 37.293333] ? ac6_seq_show+0x200/0x200 [ 37.297277] ip6_local_out+0x573/0x640 [ 37.301136] ? __ip6_local_out+0x4f0/0x4f0 [ 37.305343] ip6_push_pending_frames+0x218/0x4d0 [ 37.310072] rawv6_sendmsg+0x4500/0x4cc0 [ 37.314116] ? _raw_spin_unlock_bh+0x57/0x70 [ 37.318496] ? __local_bh_enable_ip+0x3b/0x140 [ 37.323049] ? _raw_spin_unlock_bh+0x57/0x70 [ 37.327428] ? _raw_spin_unlock_bh+0x57/0x70 [ 37.331820] ? compat_rawv6_ioctl+0x30/0x30 [ 37.336112] inet_sendmsg+0x48d/0x740 [ 37.339886] ? security_socket_sendmsg+0x9e/0x210 [ 37.344700] ? inet_getname+0x500/0x500 [ 37.348647] sock_write_iter+0x3b9/0x470 [ 37.352682] ? sock_read_iter+0x480/0x480 [ 37.356800] do_iter_readv_writev+0x7bb/0x970 [ 37.361278] ? sock_read_iter+0x480/0x480 [ 37.365398] do_iter_write+0x30d/0xd40 [ 37.369257] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 37.374680] do_writev+0x3c9/0x830 [ 37.378197] ? syscall_return_slowpath+0xe9/0x700 [ 37.383009] ? SYSC_sendmsg+0x3ac/0x3d0 [ 37.386959] SYSC_writev+0x9b/0xb0 [ 37.390469] SyS_writev+0x56/0x80 [ 37.393893] do_syscall_64+0x309/0x430 [ 37.397753] ? SYSC_readv+0xb0/0xb0 [ 37.401351] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 37.406514] RIP: 0033:0x43ffa9 [ 37.409673] RSP: 002b:00007fffcb5f67c8 EFLAGS: 00000217 ORIG_RAX: 0000000000000014 [ 37.417350] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043ffa9 [ 37.424595] RDX: 0000000000000001 RSI: 0000000020001c40 RDI: 0000000000000003 [ 37.431836] RBP: 00000000006ca018 R08: 00000000004002c8 R09: 00000000004002c8 [ 37.439076] R10: 00000000004002c8 R11: 0000000000000217 R12: 00000000004018d0 [ 37.446330] R13: 0000000000401960 R14: 0000000000000000 R15: 0000000000000000 [ 37.453581] [ 37.455176] Uninit was stored to memory at: [ 37.459474] kmsan_internal_chain_origin+0x12b/0x210 [ 37.464548] kmsan_memcpy_origins+0x11d/0x170 [ 37.469015] __msan_memcpy+0x19f/0x1f0 [ 37.472874] skb_copy_bits+0x63a/0xdb0 [ 37.476730] __pskb_pull_tail+0x483/0x22e0 [ 37.480936] ipv6_frag_rcv+0x1894/0x6970 [ 37.484969] ip6_input_finish+0xa62/0x2110 [ 37.489175] ip6_input+0x294/0x320 [ 37.492685] ipv6_rcv+0x20ec/0x26d0 [ 37.496283] __netif_receive_skb_core+0x47cf/0x4a80 [ 37.501270] process_backlog+0x62d/0xe20 [ 37.505300] net_rx_action+0x7c1/0x1a70 [ 37.509246] __do_softirq+0x56d/0x93d [ 37.513012] Uninit was created at: [ 37.516522] kmsan_alloc_meta_for_pages+0x161/0x3a0 [ 37.521506] kmsan_alloc_page+0x82/0xe0 [ 37.525450] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 37.530175] alloc_pages_current+0x6b5/0x970 [ 37.534552] skb_page_frag_refill+0x3ba/0x5e0 [ 37.539020] sk_page_frag_refill+0xa4/0x340 [ 37.543313] __ip6_append_data+0x1a20/0x4bb0 [ 37.547691] ip6_append_data+0x40e/0x6b0 [ 37.551723] rawv6_sendmsg+0x2787/0x4cc0 [ 37.555757] inet_sendmsg+0x48d/0x740 [ 37.559528] sock_write_iter+0x3b9/0x470 [ 37.563559] do_iter_readv_writev+0x7bb/0x970 [ 37.568026] do_iter_write+0x30d/0xd40 [ 37.571884] do_writev+0x3c9/0x830 [ 37.575393] SYSC_writev+0x9b/0xb0 [ 37.578905] SyS_writev+0x56/0x80 [ 37.582329] do_syscall_64+0x309/0x430 [ 37.586185] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 37.591345] ================================================================== [ 37.598674] Disabling lock debugging due to kernel taint [ 37.604099] Kernel panic - not syncing: panic_on_warn set ... [ 37.604099] [ 37.611446] CPU: 0 PID: 3580 Comm: syzkaller433171 Tainted: G B 4.16.0+ #82 [ 37.619730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 37.629059] Call Trace: [ 37.631617] [ 37.633746] dump_stack+0x185/0x1d0 [ 37.637348] panic+0x39d/0x940 [ 37.640524] ? ipv6_frag_rcv+0xfa5/0x6970 [ 37.644645] kmsan_report+0x238/0x240 [ 37.648421] __msan_warning_32+0x6c/0xb0 [ 37.652461] ipv6_frag_rcv+0xfa5/0x6970 [ 37.656413] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 37.661803] ? ipv6_frag_exit+0x90/0x90 [ 37.665754] ip6_input_finish+0xa62/0x2110 [ 37.669971] ? ip6table_filter_hook+0xb5/0xe0 [ 37.674446] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 37.679788] ip6_input+0x294/0x320 [ 37.683301] ? ip6_input+0x320/0x320 [ 37.686989] ? ipv6_rcv+0x26d0/0x26d0 [ 37.690764] ipv6_rcv+0x20ec/0x26d0 [ 37.694365] ? local_bh_enable+0x40/0x40 [ 37.698404] __netif_receive_skb_core+0x47cf/0x4a80 [ 37.703393] ? kmsan_internal_memset_shadow_inline+0xd0/0xd0 [ 37.709165] ? ip6_rcv_finish+0x4d0/0x4d0 [ 37.713287] process_backlog+0x62d/0xe20 [ 37.717327] ? rps_trigger_softirq+0x2f0/0x2f0 [ 37.721882] net_rx_action+0x7c1/0x1a70 [ 37.725834] ? net_tx_action+0xab0/0xab0 [ 37.729870] __do_softirq+0x56d/0x93d [ 37.733648] do_softirq_own_stack+0x2a/0x40 [ 37.737938] [ 37.740153] __local_bh_enable_ip+0x114/0x140 [ 37.744622] local_bh_enable+0x36/0x40 [ 37.748487] ip6_finish_output2+0x1b6c/0x1f20 [ 37.752960] ip6_finish_output+0xb3f/0xc00 [ 37.757173] ip6_output+0x597/0x6c0 [ 37.760773] ? ip6_output+0x6c0/0x6c0 [ 37.764549] ? ac6_seq_show+0x200/0x200 [ 37.768497] ip6_local_out+0x573/0x640 [ 37.772359] ? __ip6_local_out+0x4f0/0x4f0 [ 37.776571] ip6_push_pending_frames+0x218/0x4d0 [ 37.781304] rawv6_sendmsg+0x4500/0x4cc0 [ 37.785339] ? _raw_spin_unlock_bh+0x57/0x70 [ 37.789724] ? __local_bh_enable_ip+0x3b/0x140 [ 37.794278] ? _raw_spin_unlock_bh+0x57/0x70 [ 37.798669] ? _raw_spin_unlock_bh+0x57/0x70 [ 37.803062] ? compat_rawv6_ioctl+0x30/0x30 [ 37.807360] inet_sendmsg+0x48d/0x740 [ 37.811133] ? security_socket_sendmsg+0x9e/0x210 [ 37.815949] ? inet_getname+0x500/0x500 [ 37.819897] sock_write_iter+0x3b9/0x470 [ 37.823935] ? sock_read_iter+0x480/0x480 [ 37.828064] do_iter_readv_writev+0x7bb/0x970 [ 37.832544] ? sock_read_iter+0x480/0x480 [ 37.836664] do_iter_write+0x30d/0xd40 [ 37.840529] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 37.845953] do_writev+0x3c9/0x830 [ 37.849473] ? syscall_return_slowpath+0xe9/0x700 [ 37.854290] ? SYSC_sendmsg+0x3ac/0x3d0 [ 37.858241] SYSC_writev+0x9b/0xb0 [ 37.861757] SyS_writev+0x56/0x80 [ 37.865183] do_syscall_64+0x309/0x430 [ 37.869052] ? SYSC_readv+0xb0/0xb0 [ 37.872662] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 37.877824] RIP: 0033:0x43ffa9 [ 37.880984] RSP: 002b:00007fffcb5f67c8 EFLAGS: 00000217 ORIG_RAX: 0000000000000014 [ 37.888667] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043ffa9 [ 37.895908] RDX: 0000000000000001 RSI: 0000000020001c40 RDI: 0000000000000003 [ 37.903152] RBP: 00000000006ca018 R08: 00000000004002c8 R09: 00000000004002c8 [ 37.910396] R10: 00000000004002c8 R11: 0000000000000217 R12: 00000000004018d0 [ 37.917641] R13: 0000000000401960 R14: 0000000000000000 R15: 0000000000000000 [ 37.925307] Dumping ftrace buffer: [ 37.928821] (ftrace buffer empty) [ 37.932503] Kernel Offset: disabled [ 37.936099] Rebooting in 86400 seconds..