INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.59' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 29.437993] ================================================================== [ 29.445417] BUG: KMSAN: uninit-value in csum_partial+0x78e/0x850 [ 29.451547] CPU: 0 PID: 3583 Comm: syzkaller384224 Not tainted 4.16.0+ #83 [ 29.458536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 29.467866] Call Trace: [ 29.470428] [ 29.472562] dump_stack+0x185/0x1d0 [ 29.476172] ? csum_partial+0x78e/0x850 [ 29.480133] kmsan_report+0x142/0x240 [ 29.483921] __msan_warning_32+0x6c/0xb0 [ 29.487964] csum_partial+0x78e/0x850 [ 29.491765] csum_partial_ext+0x89/0xa0 [ 29.495722] __skb_checksum+0x6d4/0x1010 [ 29.499762] ? skb_checksum+0x120/0x120 [ 29.503715] skb_checksum+0xec/0x120 [ 29.507405] ? skb_checksum+0x120/0x120 [ 29.511359] ? csum_partial_ext+0xa0/0xa0 [ 29.515488] __skb_checksum_complete+0x90/0x400 [ 29.520150] udp6_csum_init+0x94f/0x10c0 [ 29.524215] __udp6_lib_rcv+0x534/0x3920 [ 29.528260] ? ip6_input_finish+0x55c/0x2110 [ 29.532653] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 29.538002] udpv6_rcv+0x5c/0x70 [ 29.541959] ? udp_v6_early_demux+0x11a0/0x11a0 [ 29.546610] ip6_input_finish+0xa62/0x2110 [ 29.550831] ? ip6table_filter_hook+0xb5/0xe0 [ 29.555327] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 29.560670] ? ip6_input_finish+0x12a1/0x2110 [ 29.565143] ip6_input+0x294/0x320 [ 29.568661] ? ip6_input+0x320/0x320 [ 29.572354] ? ipv6_rcv+0x26d0/0x26d0 [ 29.576139] ipv6_rcv+0x20ec/0x26d0 [ 29.579743] ? local_bh_enable+0x40/0x40 [ 29.583788] __netif_receive_skb_core+0x47cf/0x4a80 [ 29.588784] ? kmsan_internal_memset_shadow_inline+0xd0/0xd0 [ 29.594560] ? ip6_rcv_finish+0x4d0/0x4d0 [ 29.598687] process_backlog+0x62d/0xe20 [ 29.602728] ? rps_trigger_softirq+0x2f0/0x2f0 [ 29.607288] net_rx_action+0x7c1/0x1a70 [ 29.611245] ? net_tx_action+0xab0/0xab0 [ 29.615284] __do_softirq+0x56d/0x93d [ 29.619065] do_softirq_own_stack+0x2a/0x40 [ 29.623364] [ 29.625594] __local_bh_enable_ip+0x114/0x140 [ 29.630085] local_bh_enable+0x36/0x40 [ 29.633958] ip6_finish_output2+0x1b6c/0x1f20 [ 29.638443] ip6_finish_output+0xb3f/0xc00 [ 29.642658] ip6_output+0x597/0x6c0 [ 29.646262] ? ip6_output+0x6c0/0x6c0 [ 29.650041] ? ac6_seq_show+0x200/0x200 [ 29.653993] ip6_local_out+0x573/0x640 [ 29.657864] ? __ip6_local_out+0x4f0/0x4f0 [ 29.662079] ip6_send_skb+0xfa/0x380 [ 29.665773] udp_v6_send_skb+0x116a/0x1880 [ 29.669991] udpv6_sendmsg+0x15f4/0x45b0 [ 29.674035] ? rw_copy_check_uvector+0x5af/0x6c0 [ 29.678771] ? rw_copy_check_uvector+0x643/0x6c0 [ 29.683515] ? ip_copy_metadata+0xac0/0xac0 [ 29.687819] ? udpv6_queue_rcv_skb+0x1c60/0x1c60 [ 29.692553] inet_sendmsg+0x48d/0x740 [ 29.696333] ? security_socket_sendmsg+0x9e/0x210 [ 29.701155] ? inet_getname+0x500/0x500 [ 29.705113] ___sys_sendmsg+0xec0/0x1310 [ 29.709166] ? __fdget+0x4e/0x60 [ 29.712510] ? __fget_light+0x56/0x710 [ 29.716376] ? __fdget+0x4e/0x60 [ 29.719716] ? __fget_light+0x1dc/0x710 [ 29.723668] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 29.729006] ? __fget_light+0x1f5/0x710 [ 29.732962] SYSC_sendmsg+0x2a3/0x3d0 [ 29.736744] SyS_sendmsg+0x54/0x80 [ 29.740262] do_syscall_64+0x309/0x430 [ 29.744136] ? ___sys_sendmsg+0x1310/0x1310 [ 29.748447] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 29.753612] RIP: 0033:0x4400d9 [ 29.756777] RSP: 002b:00007ffced01f5d8 EFLAGS: 00000217 ORIG_RAX: 000000000000002e [ 29.764461] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004400d9 [ 29.771708] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000003 [ 29.778957] RBP: 00000000006ca018 R08: 0000000000000000 R09: 0000000000000000 [ 29.786203] R10: 0000000000000000 R11: 0000000000000217 R12: 0000000000401a00 [ 29.793450] R13: 0000000000401a90 R14: 0000000000000000 R15: 0000000000000000 [ 29.800704] [ 29.802305] Uninit was created at: [ 29.805826] kmsan_alloc_meta_for_pages+0x161/0x3a0 [ 29.810817] kmsan_alloc_page+0x82/0xe0 [ 29.814769] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 29.819500] alloc_pages_current+0x6b5/0x970 [ 29.823884] skb_page_frag_refill+0x3ba/0x5e0 [ 29.828355] sk_page_frag_refill+0xa4/0x340 [ 29.832655] __ip6_append_data+0x1a20/0x4bb0 [ 29.837040] ip6_append_data+0x40e/0x6b0 [ 29.841083] udpv6_sendmsg+0xfd5/0x45b0 [ 29.845036] inet_sendmsg+0x48d/0x740 [ 29.848816] ___sys_sendmsg+0xec0/0x1310 [ 29.852857] SYSC_sendmsg+0x2a3/0x3d0 [ 29.856637] SyS_sendmsg+0x54/0x80 [ 29.860159] do_syscall_64+0x309/0x430 [ 29.864034] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 29.869203] ================================================================== [ 29.876545] Disabling lock debugging due to kernel taint [ 29.881970] Kernel panic - not syncing: panic_on_warn set ... [ 29.881970] [ 29.889314] CPU: 0 PID: 3583 Comm: syzkaller384224 Tainted: G B 4.16.0+ #83 [ 29.897603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 29.906934] Call Trace: [ 29.909498] [ 29.911630] dump_stack+0x185/0x1d0 [ 29.915237] panic+0x39d/0x940 [ 29.918420] ? csum_partial+0x78e/0x850 [ 29.922377] kmsan_report+0x238/0x240 [ 29.926176] __msan_warning_32+0x6c/0xb0 [ 29.930215] csum_partial+0x78e/0x850 [ 29.934006] csum_partial_ext+0x89/0xa0 [ 29.937960] __skb_checksum+0x6d4/0x1010 [ 29.942010] ? skb_checksum+0x120/0x120 [ 29.945961] skb_checksum+0xec/0x120 [ 29.949652] ? skb_checksum+0x120/0x120 [ 29.953602] ? csum_partial_ext+0xa0/0xa0 [ 29.957730] __skb_checksum_complete+0x90/0x400 [ 29.962380] udp6_csum_init+0x94f/0x10c0 [ 29.966425] __udp6_lib_rcv+0x534/0x3920 [ 29.970476] ? ip6_input_finish+0x55c/0x2110 [ 29.974873] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 29.980221] udpv6_rcv+0x5c/0x70 [ 29.983564] ? udp_v6_early_demux+0x11a0/0x11a0 [ 29.988213] ip6_input_finish+0xa62/0x2110 [ 29.992437] ? ip6table_filter_hook+0xb5/0xe0 [ 29.996921] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 30.002263] ? ip6_input_finish+0x12a1/0x2110 [ 30.006739] ip6_input+0x294/0x320 [ 30.010259] ? ip6_input+0x320/0x320 [ 30.013952] ? ipv6_rcv+0x26d0/0x26d0 [ 30.017734] ipv6_rcv+0x20ec/0x26d0 [ 30.021341] ? local_bh_enable+0x40/0x40 [ 30.025386] __netif_receive_skb_core+0x47cf/0x4a80 [ 30.030384] ? kmsan_internal_memset_shadow_inline+0xd0/0xd0 [ 30.036173] ? ip6_rcv_finish+0x4d0/0x4d0 [ 30.040306] process_backlog+0x62d/0xe20 [ 30.044348] ? rps_trigger_softirq+0x2f0/0x2f0 [ 30.048906] net_rx_action+0x7c1/0x1a70 [ 30.052859] ? net_tx_action+0xab0/0xab0 [ 30.056898] __do_softirq+0x56d/0x93d [ 30.060680] do_softirq_own_stack+0x2a/0x40 [ 30.064975] [ 30.067193] __local_bh_enable_ip+0x114/0x140 [ 30.071666] local_bh_enable+0x36/0x40 [ 30.075542] ip6_finish_output2+0x1b6c/0x1f20 [ 30.080033] ip6_finish_output+0xb3f/0xc00 [ 30.084262] ip6_output+0x597/0x6c0 [ 30.087864] ? ip6_output+0x6c0/0x6c0 [ 30.091642] ? ac6_seq_show+0x200/0x200 [ 30.095594] ip6_local_out+0x573/0x640 [ 30.099460] ? __ip6_local_out+0x4f0/0x4f0 [ 30.105154] ip6_send_skb+0xfa/0x380 [ 30.108853] udp_v6_send_skb+0x116a/0x1880 [ 30.113071] udpv6_sendmsg+0x15f4/0x45b0 [ 30.117121] ? rw_copy_check_uvector+0x5af/0x6c0 [ 30.121856] ? rw_copy_check_uvector+0x643/0x6c0 [ 30.126590] ? ip_copy_metadata+0xac0/0xac0 [ 30.130897] ? udpv6_queue_rcv_skb+0x1c60/0x1c60 [ 30.135630] inet_sendmsg+0x48d/0x740 [ 30.139409] ? security_socket_sendmsg+0x9e/0x210 [ 30.144232] ? inet_getname+0x500/0x500 [ 30.148185] ___sys_sendmsg+0xec0/0x1310 [ 30.152227] ? __fdget+0x4e/0x60 [ 30.155572] ? __fget_light+0x56/0x710 [ 30.159443] ? __fdget+0x4e/0x60 [ 30.162792] ? __fget_light+0x1dc/0x710 [ 30.166759] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 30.172113] ? __fget_light+0x1f5/0x710 [ 30.176090] SYSC_sendmsg+0x2a3/0x3d0 [ 30.179884] SyS_sendmsg+0x54/0x80 [ 30.183400] do_syscall_64+0x309/0x430 [ 30.187267] ? ___sys_sendmsg+0x1310/0x1310 [ 30.191567] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 30.196733] RIP: 0033:0x4400d9 [ 30.199898] RSP: 002b:00007ffced01f5d8 EFLAGS: 00000217 ORIG_RAX: 000000000000002e [ 30.207584] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004400d9 [ 30.214832] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000003 [ 30.222082] RBP: 00000000006ca018 R08: 0000000000000000 R09: 0000000000000000 [ 30.229332] R10: 0000000000000000 R11: 0000000000000217 R12: 0000000000401a00 [ 30.236580] R13: 0000000000401a90 R14: 0000000000000000 R15: 0000000000000000 [ 30.244321] Dumping ftrace buffer: [ 30.247837] (ftrace buffer empty) [ 30.251528] Kernel Offset: disabled [ 30.255128] Rebooting in 86400 seconds..