INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.5' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 38.103300] ================================================================== [ 38.110686] BUG: KMSAN: uninit-value in csum_partial+0x78e/0x850 [ 38.116806] CPU: 0 PID: 3566 Comm: syzkaller424567 Not tainted 4.16.0+ #84 [ 38.123789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 38.133126] Call Trace: [ 38.135683] [ 38.137809] dump_stack+0x185/0x1d0 [ 38.141408] ? csum_partial+0x78e/0x850 [ 38.145598] kmsan_report+0x142/0x240 [ 38.149380] __msan_warning_32+0x6c/0xb0 [ 38.153415] csum_partial+0x78e/0x850 [ 38.157191] csum_partial_ext+0x89/0xa0 [ 38.161139] __skb_checksum+0x6d4/0x1010 [ 38.165174] ? skb_checksum+0x120/0x120 [ 38.169121] skb_checksum+0xec/0x120 [ 38.172807] ? skb_checksum+0x120/0x120 [ 38.176753] ? csum_partial_ext+0xa0/0xa0 [ 38.180878] __skb_checksum_complete+0x90/0x400 [ 38.185523] udp6_csum_init+0x94f/0x10c0 [ 38.189563] __udp6_lib_rcv+0x534/0x3920 [ 38.193600] ? ip6_input_finish+0x55c/0x2110 [ 38.197986] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 38.203337] udpv6_rcv+0x5c/0x70 [ 38.206679] ? udp_v6_early_demux+0x11a0/0x11a0 [ 38.211320] ip6_input_finish+0xa62/0x2110 [ 38.215533] ? ip6table_filter_hook+0xb5/0xe0 [ 38.220002] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 38.225340] ? ip6_input_finish+0x12a1/0x2110 [ 38.229808] ip6_input+0x294/0x320 [ 38.233324] ? ip6_input+0x320/0x320 [ 38.237021] ? ipv6_rcv+0x26d0/0x26d0 [ 38.240797] ipv6_rcv+0x20ec/0x26d0 [ 38.244406] ? local_bh_enable+0x40/0x40 [ 38.248447] __netif_receive_skb_core+0x47cf/0x4a80 [ 38.253440] ? kmsan_internal_memset_shadow_inline+0xc0/0xd0 [ 38.259213] ? ip6_rcv_finish+0x4d0/0x4d0 [ 38.263334] process_backlog+0x62d/0xe20 [ 38.267398] ? rps_trigger_softirq+0x2f0/0x2f0 [ 38.271952] net_rx_action+0x7c1/0x1a70 [ 38.275903] ? net_tx_action+0xab0/0xab0 [ 38.279941] __do_softirq+0x56d/0x93d [ 38.283719] do_softirq_own_stack+0x2a/0x40 [ 38.288017] [ 38.290235] __local_bh_enable_ip+0x114/0x140 [ 38.294704] local_bh_enable+0x36/0x40 [ 38.298565] ip6_finish_output2+0x1b6c/0x1f20 [ 38.303040] ip6_finish_output+0xb3f/0xc00 [ 38.307254] ip6_output+0x597/0x6c0 [ 38.310855] ? ip6_output+0x6c0/0x6c0 [ 38.314633] ? ac6_seq_show+0x200/0x200 [ 38.318590] ip6_local_out+0x573/0x640 [ 38.322456] ? __ip6_local_out+0x4f0/0x4f0 [ 38.326669] ip6_send_skb+0xfa/0x380 [ 38.330359] udp_v6_send_skb+0x116a/0x1880 [ 38.334570] udpv6_sendmsg+0x15f4/0x45b0 [ 38.338619] ? rw_copy_check_uvector+0x5af/0x6c0 [ 38.343357] ? rw_copy_check_uvector+0x643/0x6c0 [ 38.348098] ? ip_copy_metadata+0xac0/0xac0 [ 38.352405] ? udpv6_queue_rcv_skb+0x1c60/0x1c60 [ 38.357134] inet_sendmsg+0x48d/0x740 [ 38.360915] ? security_socket_sendmsg+0x9e/0x210 [ 38.365730] ? inet_getname+0x500/0x500 [ 38.369685] ___sys_sendmsg+0xec0/0x1310 [ 38.373726] ? __fdget+0x4e/0x60 [ 38.377067] ? __fget_light+0x56/0x710 [ 38.380924] ? __fdget+0x4e/0x60 [ 38.384264] ? __fget_light+0x1dc/0x710 [ 38.388216] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 38.393552] ? __fget_light+0x1f5/0x710 [ 38.397506] SYSC_sendmsg+0x2a3/0x3d0 [ 38.401286] SyS_sendmsg+0x54/0x80 [ 38.404799] do_syscall_64+0x309/0x430 [ 38.408661] ? ___sys_sendmsg+0x1310/0x1310 [ 38.412957] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 38.418119] RIP: 0033:0x440239 [ 38.421282] RSP: 002b:00007ffddf8ead88 EFLAGS: 00000217 ORIG_RAX: 000000000000002e [ 38.428960] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440239 [ 38.436205] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000003 [ 38.443447] RBP: 00000000006ca018 R08: 000000000000e9ae R09: 000000000000e9ae [ 38.450691] R10: 000000000000e9ae R11: 0000000000000217 R12: 0000000000401b60 [ 38.457941] R13: 0000000000401bf0 R14: 0000000000000000 R15: 0000000000000000 [ 38.465184] [ 38.466782] Uninit was created at: [ 38.470300] kmsan_alloc_meta_for_pages+0x161/0x3a0 [ 38.475293] kmsan_alloc_page+0x82/0xe0 [ 38.479239] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 38.483969] alloc_pages_current+0x6b5/0x970 [ 38.488349] skb_page_frag_refill+0x3ba/0x5e0 [ 38.492822] sk_page_frag_refill+0xa4/0x340 [ 38.497118] __ip6_append_data+0x1a20/0x4bb0 [ 38.501498] ip6_append_data+0x40e/0x6b0 [ 38.505532] udpv6_sendmsg+0xfd5/0x45b0 [ 38.509489] inet_sendmsg+0x48d/0x740 [ 38.513265] ___sys_sendmsg+0xec0/0x1310 [ 38.517300] SYSC_sendmsg+0x2a3/0x3d0 [ 38.521073] SyS_sendmsg+0x54/0x80 [ 38.524586] do_syscall_64+0x309/0x430 [ 38.528454] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 38.533617] ================================================================== [ 38.540953] Disabling lock debugging due to kernel taint [ 38.546374] Kernel panic - not syncing: panic_on_warn set ... [ 38.546374] [ 38.553709] CPU: 0 PID: 3566 Comm: syzkaller424567 Tainted: G B 4.16.0+ #84 [ 38.561992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 38.571317] Call Trace: [ 38.573875] [ 38.576001] dump_stack+0x185/0x1d0 [ 38.579601] panic+0x39d/0x940 [ 38.582791] ? csum_partial+0x78e/0x850 [ 38.586739] kmsan_report+0x238/0x240 [ 38.590516] __msan_warning_32+0x6c/0xb0 [ 38.594553] csum_partial+0x78e/0x850 [ 38.598340] csum_partial_ext+0x89/0xa0 [ 38.602287] __skb_checksum+0x6d4/0x1010 [ 38.606333] ? skb_checksum+0x120/0x120 [ 38.610281] skb_checksum+0xec/0x120 [ 38.613967] ? skb_checksum+0x120/0x120 [ 38.617913] ? csum_partial_ext+0xa0/0xa0 [ 38.622036] __skb_checksum_complete+0x90/0x400 [ 38.626681] udp6_csum_init+0x94f/0x10c0 [ 38.630720] __udp6_lib_rcv+0x534/0x3920 [ 38.634754] ? ip6_input_finish+0x55c/0x2110 [ 38.639138] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 38.644479] udpv6_rcv+0x5c/0x70 [ 38.647836] ? udp_v6_early_demux+0x11a0/0x11a0 [ 38.652507] ip6_input_finish+0xa62/0x2110 [ 38.656731] ? ip6table_filter_hook+0xb5/0xe0 [ 38.661210] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 38.666550] ? ip6_input_finish+0x12a1/0x2110 [ 38.671033] ip6_input+0x294/0x320 [ 38.674554] ? ip6_input+0x320/0x320 [ 38.678243] ? ipv6_rcv+0x26d0/0x26d0 [ 38.682016] ipv6_rcv+0x20ec/0x26d0 [ 38.685626] ? local_bh_enable+0x40/0x40 [ 38.689668] __netif_receive_skb_core+0x47cf/0x4a80 [ 38.694659] ? kmsan_internal_memset_shadow_inline+0xc0/0xd0 [ 38.700431] ? ip6_rcv_finish+0x4d0/0x4d0 [ 38.704553] process_backlog+0x62d/0xe20 [ 38.708589] ? rps_trigger_softirq+0x2f0/0x2f0 [ 38.713154] net_rx_action+0x7c1/0x1a70 [ 38.717104] ? net_tx_action+0xab0/0xab0 [ 38.721143] __do_softirq+0x56d/0x93d [ 38.724920] do_softirq_own_stack+0x2a/0x40 [ 38.729210] [ 38.731425] __local_bh_enable_ip+0x114/0x140 [ 38.735895] local_bh_enable+0x36/0x40 [ 38.739756] ip6_finish_output2+0x1b6c/0x1f20 [ 38.744252] ip6_finish_output+0xb3f/0xc00 [ 38.748486] ip6_output+0x597/0x6c0 [ 38.752086] ? ip6_output+0x6c0/0x6c0 [ 38.755861] ? ac6_seq_show+0x200/0x200 [ 38.759809] ip6_local_out+0x573/0x640 [ 38.763679] ? __ip6_local_out+0x4f0/0x4f0 [ 38.767891] ip6_send_skb+0xfa/0x380 [ 38.771589] udp_v6_send_skb+0x116a/0x1880 [ 38.775816] udpv6_sendmsg+0x15f4/0x45b0 [ 38.779855] ? rw_copy_check_uvector+0x5af/0x6c0 [ 38.784585] ? rw_copy_check_uvector+0x643/0x6c0 [ 38.789319] ? ip_copy_metadata+0xac0/0xac0 [ 38.793623] ? udpv6_queue_rcv_skb+0x1c60/0x1c60 [ 38.798357] inet_sendmsg+0x48d/0x740 [ 38.802138] ? security_socket_sendmsg+0x9e/0x210 [ 38.806962] ? inet_getname+0x500/0x500 [ 38.810909] ___sys_sendmsg+0xec0/0x1310 [ 38.814948] ? __fdget+0x4e/0x60 [ 38.818296] ? __fget_light+0x56/0x710 [ 38.822156] ? __fdget+0x4e/0x60 [ 38.825495] ? __fget_light+0x1dc/0x710 [ 38.829443] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 38.834778] ? __fget_light+0x1f5/0x710 [ 38.838737] SYSC_sendmsg+0x2a3/0x3d0 [ 38.842514] SyS_sendmsg+0x54/0x80 [ 38.846038] do_syscall_64+0x309/0x430 [ 38.849902] ? ___sys_sendmsg+0x1310/0x1310 [ 38.854198] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 38.859363] RIP: 0033:0x440239 [ 38.862523] RSP: 002b:00007ffddf8ead88 EFLAGS: 00000217 ORIG_RAX: 000000000000002e [ 38.870203] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440239 [ 38.877446] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000003 [ 38.884690] RBP: 00000000006ca018 R08: 000000000000e9ae R09: 000000000000e9ae [ 38.891933] R10: 000000000000e9ae R11: 0000000000000217 R12: 0000000000401b60 [ 38.899178] R13: 0000000000401bf0 R14: 0000000000000000 R15: 0000000000000000 [ 38.906786] Dumping ftrace buffer: [ 38.910302] (ftrace buffer empty) [ 38.913985] Kernel Offset: disabled [ 38.917584] Rebooting in 86400 seconds..