INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.35' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 34.260709] ================================================================== [ 34.268140] BUG: KMSAN: uninit-value in csum_partial+0x78e/0x850 [ 34.274275] CPU: 0 PID: 3577 Comm: syzkaller295237 Not tainted 4.16.0+ #84 [ 34.281269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 34.290609] Call Trace: [ 34.293190] [ 34.295334] dump_stack+0x185/0x1d0 [ 34.299039] ? csum_partial+0x78e/0x850 [ 34.303011] kmsan_report+0x142/0x240 [ 34.306797] __msan_warning_32+0x6c/0xb0 [ 34.310856] csum_partial+0x78e/0x850 [ 34.314648] csum_partial_ext+0x89/0xa0 [ 34.318609] __skb_checksum+0x6d4/0x1010 [ 34.322671] ? skb_checksum+0x120/0x120 [ 34.326645] skb_checksum+0xec/0x120 [ 34.330349] ? skb_checksum+0x120/0x120 [ 34.334305] ? csum_partial_ext+0xa0/0xa0 [ 34.338440] __skb_checksum_complete+0x90/0x400 [ 34.343098] udp6_csum_init+0x94f/0x10c0 [ 34.347150] __udp6_lib_rcv+0x534/0x3920 [ 34.351200] ? ip6_input_finish+0x55c/0x2110 [ 34.355607] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 34.360970] udpv6_rcv+0x5c/0x70 [ 34.364324] ? udp_v6_early_demux+0x11a0/0x11a0 [ 34.368978] ip6_input_finish+0xa62/0x2110 [ 34.373205] ? ip6table_filter_hook+0xb5/0xe0 [ 34.377686] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 34.383034] ? ip6_input_finish+0x12a1/0x2110 [ 34.387514] ip6_input+0x294/0x320 [ 34.391046] ? ip6_input+0x320/0x320 [ 34.394750] ? ipv6_rcv+0x26d0/0x26d0 [ 34.398539] ipv6_rcv+0x20ec/0x26d0 [ 34.402153] ? local_bh_enable+0x40/0x40 [ 34.406210] __netif_receive_skb_core+0x47cf/0x4a80 [ 34.411225] ? kmsan_internal_memset_shadow_inline+0xc0/0xd0 [ 34.417021] ? ip6_rcv_finish+0x4d0/0x4d0 [ 34.421180] process_backlog+0x62d/0xe20 [ 34.425233] ? rps_trigger_softirq+0x2f0/0x2f0 [ 34.429799] net_rx_action+0x7c1/0x1a70 [ 34.433767] ? net_tx_action+0xab0/0xab0 [ 34.437814] __do_softirq+0x56d/0x93d [ 34.441605] do_softirq_own_stack+0x2a/0x40 [ 34.445904] [ 34.448130] __local_bh_enable_ip+0x114/0x140 [ 34.452611] local_bh_enable+0x36/0x40 [ 34.456482] ip6_finish_output2+0x1b6c/0x1f20 [ 34.460975] ip6_finish_output+0xb3f/0xc00 [ 34.465221] ip6_output+0x597/0x6c0 [ 34.468841] ? ip6_output+0x6c0/0x6c0 [ 34.472649] ? ac6_seq_show+0x200/0x200 [ 34.476632] ip6_local_out+0x573/0x640 [ 34.480510] ? __ip6_local_out+0x4f0/0x4f0 [ 34.484754] ip6_send_skb+0xfa/0x380 [ 34.488457] udp_v6_send_skb+0x116a/0x1880 [ 34.492683] udpv6_sendmsg+0x15f4/0x45b0 [ 34.496757] ? kfree+0xde/0x29e0 [ 34.500126] ? udpv6_queue_rcv_skb+0x1c60/0x1c60 [ 34.504872] ? inet_sendmsg+0x48d/0x740 [ 34.508838] ? ip_copy_metadata+0xac0/0xac0 [ 34.513175] ? udpv6_queue_rcv_skb+0x1c60/0x1c60 [ 34.517939] inet_sendmsg+0x48d/0x740 [ 34.521731] ? security_socket_sendmsg+0x9e/0x210 [ 34.526562] ? inet_getname+0x500/0x500 [ 34.530519] SYSC_sendto+0x6c3/0x7e0 [ 34.534231] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 34.539675] ? prepare_exit_to_usermode+0x149/0x3a0 [ 34.544682] SyS_sendto+0x8a/0xb0 [ 34.548131] do_syscall_64+0x309/0x430 [ 34.552010] ? SYSC_getpeername+0x560/0x560 [ 34.556321] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 34.561507] RIP: 0033:0x440109 [ 34.564681] RSP: 002b:00007fff024406f8 EFLAGS: 00000212 ORIG_RAX: 000000000000002c [ 34.572374] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440109 [ 34.579629] RDX: 0000000000000043 RSI: 0000000020000480 RDI: 0000000000000003 [ 34.586886] RBP: 00000000006ca018 R08: 0000000020000380 R09: 000000000000001c [ 34.594153] R10: 0000000000000000 R11: 0000000000000212 R12: 0000000000401a30 [ 34.601409] R13: 0000000000401ac0 R14: 0000000000000000 R15: 0000000000000000 [ 34.608751] [ 34.610357] Uninit was created at: [ 34.613890] kmsan_alloc_meta_for_pages+0x161/0x3a0 [ 34.618902] kmsan_alloc_page+0x82/0xe0 [ 34.622973] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 34.627737] alloc_pages_current+0x6b5/0x970 [ 34.632149] skb_page_frag_refill+0x3ba/0x5e0 [ 34.636630] sk_page_frag_refill+0xa4/0x340 [ 34.640952] __ip6_append_data+0x1a20/0x4bb0 [ 34.645352] ip6_append_data+0x40e/0x6b0 [ 34.649401] udpv6_sendmsg+0xfd5/0x45b0 [ 34.653357] inet_sendmsg+0x48d/0x740 [ 34.657170] SYSC_sendto+0x6c3/0x7e0 [ 34.660875] SyS_sendto+0x8a/0xb0 [ 34.664327] do_syscall_64+0x309/0x430 [ 34.668207] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 34.673378] ================================================================== [ 34.680725] Disabling lock debugging due to kernel taint [ 34.686176] Kernel panic - not syncing: panic_on_warn set ... [ 34.686176] [ 34.693549] CPU: 0 PID: 3577 Comm: syzkaller295237 Tainted: G B 4.16.0+ #84 [ 34.701868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 34.711298] Call Trace: [ 34.713865] [ 34.716002] dump_stack+0x185/0x1d0 [ 34.719618] panic+0x39d/0x940 [ 34.722809] ? csum_partial+0x78e/0x850 [ 34.726774] kmsan_report+0x238/0x240 [ 34.730567] __msan_warning_32+0x6c/0xb0 [ 34.734616] csum_partial+0x78e/0x850 [ 34.738417] csum_partial_ext+0x89/0xa0 [ 34.742379] __skb_checksum+0x6d4/0x1010 [ 34.746425] ? skb_checksum+0x120/0x120 [ 34.750385] skb_checksum+0xec/0x120 [ 34.754083] ? skb_checksum+0x120/0x120 [ 34.758067] ? csum_partial_ext+0xa0/0xa0 [ 34.762215] __skb_checksum_complete+0x90/0x400 [ 34.766972] udp6_csum_init+0x94f/0x10c0 [ 34.771041] __udp6_lib_rcv+0x534/0x3920 [ 34.775103] ? ip6_input_finish+0x55c/0x2110 [ 34.779500] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 34.784856] udpv6_rcv+0x5c/0x70 [ 34.788217] ? udp_v6_early_demux+0x11a0/0x11a0 [ 34.792872] ip6_input_finish+0xa62/0x2110 [ 34.797123] ? ip6table_filter_hook+0xb5/0xe0 [ 34.801635] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 34.806987] ? ip6_input_finish+0x12a1/0x2110 [ 34.811472] ip6_input+0x294/0x320 [ 34.815002] ? ip6_input+0x320/0x320 [ 34.818704] ? ipv6_rcv+0x26d0/0x26d0 [ 34.822499] ipv6_rcv+0x20ec/0x26d0 [ 34.826121] ? local_bh_enable+0x40/0x40 [ 34.830190] __netif_receive_skb_core+0x47cf/0x4a80 [ 34.835211] ? kmsan_internal_memset_shadow_inline+0xc0/0xd0 [ 34.841002] ? ip6_rcv_finish+0x4d0/0x4d0 [ 34.845163] process_backlog+0x62d/0xe20 [ 34.849215] ? rps_trigger_softirq+0x2f0/0x2f0 [ 34.853780] net_rx_action+0x7c1/0x1a70 [ 34.857739] ? net_tx_action+0xab0/0xab0 [ 34.861785] __do_softirq+0x56d/0x93d [ 34.865571] do_softirq_own_stack+0x2a/0x40 [ 34.869873] [ 34.872103] __local_bh_enable_ip+0x114/0x140 [ 34.876598] local_bh_enable+0x36/0x40 [ 34.880473] ip6_finish_output2+0x1b6c/0x1f20 [ 34.884959] ip6_finish_output+0xb3f/0xc00 [ 34.889186] ip6_output+0x597/0x6c0 [ 34.892798] ? ip6_output+0x6c0/0x6c0 [ 34.896589] ? ac6_seq_show+0x200/0x200 [ 34.900557] ip6_local_out+0x573/0x640 [ 34.904437] ? __ip6_local_out+0x4f0/0x4f0 [ 34.908670] ip6_send_skb+0xfa/0x380 [ 34.912385] udp_v6_send_skb+0x116a/0x1880 [ 34.916612] udpv6_sendmsg+0x15f4/0x45b0 [ 34.920672] ? kfree+0xde/0x29e0 [ 34.924031] ? udpv6_queue_rcv_skb+0x1c60/0x1c60 [ 34.928775] ? inet_sendmsg+0x48d/0x740 [ 34.932745] ? ip_copy_metadata+0xac0/0xac0 [ 34.937072] ? udpv6_queue_rcv_skb+0x1c60/0x1c60 [ 34.941832] inet_sendmsg+0x48d/0x740 [ 34.945617] ? security_socket_sendmsg+0x9e/0x210 [ 34.950463] ? inet_getname+0x500/0x500 [ 34.954423] SYSC_sendto+0x6c3/0x7e0 [ 34.958122] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 34.963559] ? prepare_exit_to_usermode+0x149/0x3a0 [ 34.968577] SyS_sendto+0x8a/0xb0 [ 34.972025] do_syscall_64+0x309/0x430 [ 34.975900] ? SYSC_getpeername+0x560/0x560 [ 34.980213] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 34.985395] RIP: 0033:0x440109 [ 34.988567] RSP: 002b:00007fff024406f8 EFLAGS: 00000212 ORIG_RAX: 000000000000002c [ 34.996258] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440109 [ 35.003525] RDX: 0000000000000043 RSI: 0000000020000480 RDI: 0000000000000003 [ 35.010793] RBP: 00000000006ca018 R08: 0000000020000380 R09: 000000000000001c [ 35.018046] R10: 0000000000000000 R11: 0000000000000212 R12: 0000000000401a30 [ 35.025302] R13: 0000000000401ac0 R14: 0000000000000000 R15: 0000000000000000 [ 35.033140] Dumping ftrace buffer: [ 35.036670] (ftrace buffer empty) [ 35.040358] Kernel Offset: disabled [ 35.043968] Rebooting in 86400 seconds..