INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.39' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 29.823392] ================================================================== [ 29.830788] BUG: KMSAN: uninit-value in csum_partial+0x78e/0x850 [ 29.836922] CPU: 0 PID: 3577 Comm: syzkaller626373 Not tainted 4.16.0+ #82 [ 29.843918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 29.853250] Call Trace: [ 29.855809] [ 29.857938] dump_stack+0x185/0x1d0 [ 29.861542] ? csum_partial+0x78e/0x850 [ 29.865492] kmsan_report+0x142/0x240 [ 29.869272] __msan_warning_32+0x6c/0xb0 [ 29.873309] csum_partial+0x78e/0x850 [ 29.877096] csum_partial_ext+0x89/0xa0 [ 29.881059] __skb_checksum+0x6d4/0x1010 [ 29.885110] ? skb_checksum+0x120/0x120 [ 29.889071] skb_checksum+0xec/0x120 [ 29.892766] ? skb_checksum+0x120/0x120 [ 29.896714] ? csum_partial_ext+0xa0/0xa0 [ 29.900841] __skb_checksum_complete+0x90/0x400 [ 29.905501] udp6_csum_init+0x94f/0x10c0 [ 29.909541] __udp6_lib_rcv+0x534/0x3920 [ 29.913580] ? ip6_input_finish+0x55c/0x2110 [ 29.917964] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 29.923309] udpv6_rcv+0x5c/0x70 [ 29.926650] ? udp_v6_early_demux+0x11a0/0x11a0 [ 29.931294] ip6_input_finish+0xa62/0x2110 [ 29.935508] ? ip6table_filter_hook+0xb5/0xe0 [ 29.939977] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 29.945315] ? ip6_input_finish+0x12a1/0x2110 [ 29.949786] ip6_input+0x294/0x320 [ 29.953304] ? ip6_input+0x320/0x320 [ 29.956993] ? ipv6_rcv+0x26d0/0x26d0 [ 29.960772] ipv6_rcv+0x20ec/0x26d0 [ 29.964376] ? local_bh_enable+0x40/0x40 [ 29.968418] __netif_receive_skb_core+0x47cf/0x4a80 [ 29.973415] ? kmsan_internal_memset_shadow_inline+0xd0/0xd0 [ 29.979193] ? ip6_rcv_finish+0x4d0/0x4d0 [ 29.983321] process_backlog+0x62d/0xe20 [ 29.987359] ? rps_trigger_softirq+0x2f0/0x2f0 [ 29.991917] net_rx_action+0x7c1/0x1a70 [ 29.995869] ? net_tx_action+0xab0/0xab0 [ 29.999906] __do_softirq+0x56d/0x93d [ 30.003687] do_softirq_own_stack+0x2a/0x40 [ 30.007978] [ 30.010192] __local_bh_enable_ip+0x114/0x140 [ 30.014663] local_bh_enable+0x36/0x40 [ 30.018526] ip6_finish_output2+0x1b6c/0x1f20 [ 30.023006] ip6_finish_output+0xb3f/0xc00 [ 30.027229] ip6_output+0x597/0x6c0 [ 30.030965] ? ip6_output+0x6c0/0x6c0 [ 30.034743] ? ac6_seq_show+0x200/0x200 [ 30.038693] ip6_local_out+0x573/0x640 [ 30.042557] ? __ip6_local_out+0x4f0/0x4f0 [ 30.046769] ip6_send_skb+0xfa/0x380 [ 30.050462] udp_v6_send_skb+0x116a/0x1880 [ 30.054680] udpv6_sendmsg+0x15f4/0x45b0 [ 30.058719] ? rw_copy_check_uvector+0x5af/0x6c0 [ 30.063453] ? rw_copy_check_uvector+0x643/0x6c0 [ 30.068187] ? ip_copy_metadata+0xac0/0xac0 [ 30.072488] ? udpv6_queue_rcv_skb+0x1c60/0x1c60 [ 30.077217] inet_sendmsg+0x48d/0x740 [ 30.081001] ? security_socket_sendmsg+0x9e/0x210 [ 30.085826] ? inet_getname+0x500/0x500 [ 30.089779] ___sys_sendmsg+0xec0/0x1310 [ 30.093819] ? __fdget+0x4e/0x60 [ 30.097161] ? __fget_light+0x56/0x710 [ 30.101033] ? __fdget+0x4e/0x60 [ 30.104383] ? __fget_light+0x1dc/0x710 [ 30.108337] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 30.113764] ? __fget_light+0x1f5/0x710 [ 30.117717] SYSC_sendmsg+0x2a3/0x3d0 [ 30.121500] SyS_sendmsg+0x54/0x80 [ 30.125024] do_syscall_64+0x309/0x430 [ 30.128896] ? ___sys_sendmsg+0x1310/0x1310 [ 30.133196] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 30.138358] RIP: 0033:0x43fe69 [ 30.141521] RSP: 002b:00007ffd42722088 EFLAGS: 00000217 ORIG_RAX: 000000000000002e [ 30.149299] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043fe69 [ 30.156544] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000003 [ 30.163788] RBP: 00000000006ca018 R08: 00000000004002c8 R09: 00000000004002c8 [ 30.171037] R10: 00000000004002c8 R11: 0000000000000217 R12: 0000000000401790 [ 30.178287] R13: 0000000000401820 R14: 0000000000000000 R15: 0000000000000000 [ 30.185530] [ 30.187129] Uninit was created at: [ 30.190663] kmsan_alloc_meta_for_pages+0x161/0x3a0 [ 30.195655] kmsan_alloc_page+0x82/0xe0 [ 30.199603] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 30.204334] alloc_pages_current+0x6b5/0x970 [ 30.208717] skb_page_frag_refill+0x3ba/0x5e0 [ 30.213187] sk_page_frag_refill+0xa4/0x340 [ 30.217488] __ip6_append_data+0x1a20/0x4bb0 [ 30.221871] ip6_append_data+0x40e/0x6b0 [ 30.225910] udpv6_sendmsg+0xfd5/0x45b0 [ 30.229859] inet_sendmsg+0x48d/0x740 [ 30.233637] ___sys_sendmsg+0xec0/0x1310 [ 30.237673] SYSC_sendmsg+0x2a3/0x3d0 [ 30.241448] SyS_sendmsg+0x54/0x80 [ 30.244963] do_syscall_64+0x309/0x430 [ 30.248827] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 30.253987] ================================================================== [ 30.261319] Disabling lock debugging due to kernel taint [ 30.266741] Kernel panic - not syncing: panic_on_warn set ... [ 30.266741] [ 30.274091] CPU: 0 PID: 3577 Comm: syzkaller626373 Tainted: G B 4.16.0+ #82 [ 30.282413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 30.291911] Call Trace: [ 30.294483] [ 30.296726] dump_stack+0x185/0x1d0 [ 30.300346] panic+0x39d/0x940 [ 30.303537] ? csum_partial+0x78e/0x850 [ 30.307493] kmsan_report+0x238/0x240 [ 30.311274] __msan_warning_32+0x6c/0xb0 [ 30.315316] csum_partial+0x78e/0x850 [ 30.319109] csum_partial_ext+0x89/0xa0 [ 30.323261] __skb_checksum+0x6d4/0x1010 [ 30.327319] ? skb_checksum+0x120/0x120 [ 30.331282] skb_checksum+0xec/0x120 [ 30.334975] ? skb_checksum+0x120/0x120 [ 30.338956] ? csum_partial_ext+0xa0/0xa0 [ 30.343106] __skb_checksum_complete+0x90/0x400 [ 30.347774] udp6_csum_init+0x94f/0x10c0 [ 30.351853] __udp6_lib_rcv+0x534/0x3920 [ 30.355893] ? ip6_input_finish+0x55c/0x2110 [ 30.360283] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 30.365629] udpv6_rcv+0x5c/0x70 [ 30.368971] ? udp_v6_early_demux+0x11a0/0x11a0 [ 30.373616] ip6_input_finish+0xa62/0x2110 [ 30.377829] ? ip6table_filter_hook+0xb5/0xe0 [ 30.382307] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 30.387658] ? ip6_input_finish+0x12a1/0x2110 [ 30.392129] ip6_input+0x294/0x320 [ 30.395647] ? ip6_input+0x320/0x320 [ 30.399356] ? ipv6_rcv+0x26d0/0x26d0 [ 30.403132] ipv6_rcv+0x20ec/0x26d0 [ 30.406734] ? local_bh_enable+0x40/0x40 [ 30.410777] __netif_receive_skb_core+0x47cf/0x4a80 [ 30.415768] ? kmsan_internal_memset_shadow_inline+0xd0/0xd0 [ 30.421541] ? ip6_rcv_finish+0x4d0/0x4d0 [ 30.425676] process_backlog+0x62d/0xe20 [ 30.429715] ? rps_trigger_softirq+0x2f0/0x2f0 [ 30.434271] net_rx_action+0x7c1/0x1a70 [ 30.438221] ? net_tx_action+0xab0/0xab0 [ 30.442271] __do_softirq+0x56d/0x93d [ 30.446065] do_softirq_own_stack+0x2a/0x40 [ 30.450360] [ 30.452577] __local_bh_enable_ip+0x114/0x140 [ 30.457062] local_bh_enable+0x36/0x40 [ 30.460934] ip6_finish_output2+0x1b6c/0x1f20 [ 30.465414] ip6_finish_output+0xb3f/0xc00 [ 30.469626] ip6_output+0x597/0x6c0 [ 30.473229] ? ip6_output+0x6c0/0x6c0 [ 30.477013] ? ac6_seq_show+0x200/0x200 [ 30.480972] ip6_local_out+0x573/0x640 [ 30.484837] ? __ip6_local_out+0x4f0/0x4f0 [ 30.489061] ip6_send_skb+0xfa/0x380 [ 30.492761] udp_v6_send_skb+0x116a/0x1880 [ 30.496976] udpv6_sendmsg+0x15f4/0x45b0 [ 30.501026] ? rw_copy_check_uvector+0x5af/0x6c0 [ 30.505769] ? rw_copy_check_uvector+0x643/0x6c0 [ 30.510503] ? ip_copy_metadata+0xac0/0xac0 [ 30.514807] ? udpv6_queue_rcv_skb+0x1c60/0x1c60 [ 30.519542] inet_sendmsg+0x48d/0x740 [ 30.523319] ? security_socket_sendmsg+0x9e/0x210 [ 30.528139] ? inet_getname+0x500/0x500 [ 30.532090] ___sys_sendmsg+0xec0/0x1310 [ 30.536130] ? __fdget+0x4e/0x60 [ 30.539470] ? __fget_light+0x56/0x710 [ 30.543334] ? __fdget+0x4e/0x60 [ 30.546675] ? __fget_light+0x1dc/0x710 [ 30.550628] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 30.555967] ? __fget_light+0x1f5/0x710 [ 30.559919] SYSC_sendmsg+0x2a3/0x3d0 [ 30.563701] SyS_sendmsg+0x54/0x80 [ 30.567215] do_syscall_64+0x309/0x430 [ 30.571337] ? ___sys_sendmsg+0x1310/0x1310 [ 30.575639] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 30.580801] RIP: 0033:0x43fe69 [ 30.583964] RSP: 002b:00007ffd42722088 EFLAGS: 00000217 ORIG_RAX: 000000000000002e [ 30.591646] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043fe69 [ 30.598889] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000003 [ 30.606135] RBP: 00000000006ca018 R08: 00000000004002c8 R09: 00000000004002c8 [ 30.613384] R10: 00000000004002c8 R11: 0000000000000217 R12: 0000000000401790 [ 30.620628] R13: 0000000000401820 R14: 0000000000000000 R15: 0000000000000000 [ 30.628315] Dumping ftrace buffer: [ 30.631833] (ftrace buffer empty) [ 30.635514] Kernel Offset: disabled [ 30.639114] Rebooting in 86400 seconds..