INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.29' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 30.379486] ================================================================== [ 30.386868] BUG: KMSAN: uninit-value in csum_partial+0x78e/0x850 [ 30.392992] CPU: 1 PID: 3581 Comm: syzkaller978056 Not tainted 4.16.0+ #83 [ 30.399980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 30.409314] Call Trace: [ 30.411882] [ 30.414014] dump_stack+0x185/0x1d0 [ 30.417620] ? csum_partial+0x78e/0x850 [ 30.421570] kmsan_report+0x142/0x240 [ 30.425349] __msan_warning_32+0x6c/0xb0 [ 30.429386] csum_partial+0x78e/0x850 [ 30.433169] csum_partial_ext+0x89/0xa0 [ 30.437130] __skb_checksum+0x6d4/0x1010 [ 30.441172] ? skb_checksum+0x120/0x120 [ 30.445131] skb_checksum+0xec/0x120 [ 30.448819] ? skb_checksum+0x120/0x120 [ 30.452764] ? csum_partial_ext+0xa0/0xa0 [ 30.456888] __skb_checksum_complete+0x90/0x400 [ 30.461534] udp6_csum_init+0x94f/0x10c0 [ 30.465576] __udp6_lib_rcv+0x534/0x3920 [ 30.469614] ? ip6_input_finish+0x55c/0x2110 [ 30.474004] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 30.479362] udpv6_rcv+0x5c/0x70 [ 30.482722] ? udp_v6_early_demux+0x11a0/0x11a0 [ 30.487372] ip6_input_finish+0xa62/0x2110 [ 30.491590] ? ip6table_filter_hook+0xb5/0xe0 [ 30.496066] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 30.501410] ? ip6_input_finish+0x12a1/0x2110 [ 30.505883] ip6_input+0x294/0x320 [ 30.509397] ? ip6_input+0x320/0x320 [ 30.513095] ? ipv6_rcv+0x26d0/0x26d0 [ 30.516876] ipv6_rcv+0x20ec/0x26d0 [ 30.520478] ? local_bh_enable+0x40/0x40 [ 30.524519] __netif_receive_skb_core+0x47cf/0x4a80 [ 30.529511] ? kmsan_internal_memset_shadow_inline+0xd0/0xd0 [ 30.535286] ? ip6_rcv_finish+0x4d0/0x4d0 [ 30.539413] process_backlog+0x62d/0xe20 [ 30.543453] ? rps_trigger_softirq+0x2f0/0x2f0 [ 30.548006] net_rx_action+0x7c1/0x1a70 [ 30.551957] ? net_tx_action+0xab0/0xab0 [ 30.555995] __do_softirq+0x56d/0x93d [ 30.559772] do_softirq_own_stack+0x2a/0x40 [ 30.564065] [ 30.566278] __local_bh_enable_ip+0x114/0x140 [ 30.570748] local_bh_enable+0x36/0x40 [ 30.574608] ip6_finish_output2+0x1b6c/0x1f20 [ 30.579082] ip6_finish_output+0xb3f/0xc00 [ 30.583297] ip6_output+0x597/0x6c0 [ 30.586902] ? ip6_output+0x6c0/0x6c0 [ 30.590680] ? ac6_seq_show+0x200/0x200 [ 30.594630] ip6_local_out+0x573/0x640 [ 30.598493] ? __ip6_local_out+0x4f0/0x4f0 [ 30.602707] ip6_send_skb+0xfa/0x380 [ 30.606408] udp_v6_send_skb+0x116a/0x1880 [ 30.610626] udpv6_sendmsg+0x15f4/0x45b0 [ 30.614665] ? rw_copy_check_uvector+0x5af/0x6c0 [ 30.619395] ? rw_copy_check_uvector+0x643/0x6c0 [ 30.624136] ? ip_copy_metadata+0xac0/0xac0 [ 30.628440] ? udpv6_queue_rcv_skb+0x1c60/0x1c60 [ 30.633171] inet_sendmsg+0x48d/0x740 [ 30.636948] ? security_socket_sendmsg+0x9e/0x210 [ 30.641766] ? inet_getname+0x500/0x500 [ 30.645721] ___sys_sendmsg+0xec0/0x1310 [ 30.649762] ? __fdget+0x4e/0x60 [ 30.653112] ? __fget_light+0x56/0x710 [ 30.656977] ? __fdget+0x4e/0x60 [ 30.660326] ? __fget_light+0x1dc/0x710 [ 30.664287] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 30.669625] ? __fget_light+0x1f5/0x710 [ 30.673576] SYSC_sendmsg+0x2a3/0x3d0 [ 30.677354] SyS_sendmsg+0x54/0x80 [ 30.680867] do_syscall_64+0x309/0x430 [ 30.684733] ? ___sys_sendmsg+0x1310/0x1310 [ 30.689042] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 30.694215] RIP: 0033:0x43ffc9 [ 30.697377] RSP: 002b:00007ffc8490bdc8 EFLAGS: 00000217 ORIG_RAX: 000000000000002e [ 30.705066] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043ffc9 [ 30.712317] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 30.719562] RBP: 00000000006ca018 R08: 00000000004002c8 R09: 00000000004002c8 [ 30.726806] R10: 00000000004002c8 R11: 0000000000000217 R12: 00000000004018f0 [ 30.734050] R13: 0000000000401980 R14: 0000000000000000 R15: 0000000000000000 [ 30.741297] [ 30.742896] Uninit was created at: [ 30.746410] kmsan_alloc_meta_for_pages+0x161/0x3a0 [ 30.751400] kmsan_alloc_page+0x82/0xe0 [ 30.755350] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 30.760081] alloc_pages_current+0x6b5/0x970 [ 30.764461] skb_page_frag_refill+0x3ba/0x5e0 [ 30.768930] sk_page_frag_refill+0xa4/0x340 [ 30.773229] __ip6_append_data+0x1a20/0x4bb0 [ 30.777612] ip6_append_data+0x40e/0x6b0 [ 30.781650] udpv6_sendmsg+0xfd5/0x45b0 [ 30.785597] inet_sendmsg+0x48d/0x740 [ 30.789371] ___sys_sendmsg+0xec0/0x1310 [ 30.793404] SYSC_sendmsg+0x2a3/0x3d0 [ 30.797180] SyS_sendmsg+0x54/0x80 [ 30.800694] do_syscall_64+0x309/0x430 [ 30.804559] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 30.809721] ================================================================== [ 30.817053] Disabling lock debugging due to kernel taint [ 30.822482] Kernel panic - not syncing: panic_on_warn set ... [ 30.822482] [ 30.829822] CPU: 1 PID: 3581 Comm: syzkaller978056 Tainted: G B 4.16.0+ #83 [ 30.838107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 30.847434] Call Trace: [ 30.849990] [ 30.852117] dump_stack+0x185/0x1d0 [ 30.855722] panic+0x39d/0x940 [ 30.858899] ? csum_partial+0x78e/0x850 [ 30.862846] kmsan_report+0x238/0x240 [ 30.866625] __msan_warning_32+0x6c/0xb0 [ 30.870667] csum_partial+0x78e/0x850 [ 30.874448] csum_partial_ext+0x89/0xa0 [ 30.878398] __skb_checksum+0x6d4/0x1010 [ 30.882444] ? skb_checksum+0x120/0x120 [ 30.886403] skb_checksum+0xec/0x120 [ 30.890092] ? skb_checksum+0x120/0x120 [ 30.894051] ? csum_partial_ext+0xa0/0xa0 [ 30.898180] __skb_checksum_complete+0x90/0x400 [ 30.902833] udp6_csum_init+0x94f/0x10c0 [ 30.906875] __udp6_lib_rcv+0x534/0x3920 [ 30.910909] ? ip6_input_finish+0x55c/0x2110 [ 30.915294] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 30.920637] udpv6_rcv+0x5c/0x70 [ 30.923980] ? udp_v6_early_demux+0x11a0/0x11a0 [ 30.928628] ip6_input_finish+0xa62/0x2110 [ 30.932840] ? ip6table_filter_hook+0xb5/0xe0 [ 30.937315] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 30.942654] ? ip6_input_finish+0x12a1/0x2110 [ 30.947125] ip6_input+0x294/0x320 [ 30.950642] ? ip6_input+0x320/0x320 [ 30.954332] ? ipv6_rcv+0x26d0/0x26d0 [ 30.958108] ipv6_rcv+0x20ec/0x26d0 [ 30.961712] ? local_bh_enable+0x40/0x40 [ 30.965752] __netif_receive_skb_core+0x47cf/0x4a80 [ 30.970744] ? kmsan_internal_memset_shadow_inline+0xd0/0xd0 [ 30.976517] ? ip6_rcv_finish+0x4d0/0x4d0 [ 30.980640] process_backlog+0x62d/0xe20 [ 30.984682] ? rps_trigger_softirq+0x2f0/0x2f0 [ 30.989237] net_rx_action+0x7c1/0x1a70 [ 30.993191] ? net_tx_action+0xab0/0xab0 [ 30.997230] __do_softirq+0x56d/0x93d [ 31.001010] do_softirq_own_stack+0x2a/0x40 [ 31.005310] [ 31.007523] __local_bh_enable_ip+0x114/0x140 [ 31.011994] local_bh_enable+0x36/0x40 [ 31.015855] ip6_finish_output2+0x1b6c/0x1f20 [ 31.020333] ip6_finish_output+0xb3f/0xc00 [ 31.024545] ip6_output+0x597/0x6c0 [ 31.028146] ? ip6_output+0x6c0/0x6c0 [ 31.031923] ? ac6_seq_show+0x200/0x200 [ 31.035877] ip6_local_out+0x573/0x640 [ 31.039739] ? __ip6_local_out+0x4f0/0x4f0 [ 31.043952] ip6_send_skb+0xfa/0x380 [ 31.047647] udp_v6_send_skb+0x116a/0x1880 [ 31.051861] udpv6_sendmsg+0x15f4/0x45b0 [ 31.055901] ? rw_copy_check_uvector+0x5af/0x6c0 [ 31.060633] ? rw_copy_check_uvector+0x643/0x6c0 [ 31.065368] ? ip_copy_metadata+0xac0/0xac0 [ 31.069672] ? udpv6_queue_rcv_skb+0x1c60/0x1c60 [ 31.074401] inet_sendmsg+0x48d/0x740 [ 31.078177] ? security_socket_sendmsg+0x9e/0x210 [ 31.082999] ? inet_getname+0x500/0x500 [ 31.086950] ___sys_sendmsg+0xec0/0x1310 [ 31.090991] ? __fdget+0x4e/0x60 [ 31.094333] ? __fget_light+0x56/0x710 [ 31.098193] ? __fdget+0x4e/0x60 [ 31.101533] ? __fget_light+0x1dc/0x710 [ 31.105484] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 31.110820] ? __fget_light+0x1f5/0x710 [ 31.114785] SYSC_sendmsg+0x2a3/0x3d0 [ 31.118570] SyS_sendmsg+0x54/0x80 [ 31.122089] do_syscall_64+0x309/0x430 [ 31.125953] ? ___sys_sendmsg+0x1310/0x1310 [ 31.130260] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 31.135433] RIP: 0033:0x43ffc9 [ 31.138598] RSP: 002b:00007ffc8490bdc8 EFLAGS: 00000217 ORIG_RAX: 000000000000002e [ 31.146278] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043ffc9 [ 31.153520] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 31.160766] RBP: 00000000006ca018 R08: 00000000004002c8 R09: 00000000004002c8 [ 31.168012] R10: 00000000004002c8 R11: 0000000000000217 R12: 00000000004018f0 [ 31.175277] R13: 0000000000401980 R14: 0000000000000000 R15: 0000000000000000 [ 31.183012] Dumping ftrace buffer: [ 31.186531] (ftrace buffer empty) [ 31.190212] Kernel Offset: disabled [ 31.193813] Rebooting in 86400 seconds..