INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.62' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 33.623768] ================================================================== [ 33.631149] BUG: KMSAN: uninit-value in csum_partial+0x78e/0x850 [ 33.637273] CPU: 1 PID: 3582 Comm: syzkaller804209 Not tainted 4.16.0+ #82 [ 33.644256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 33.653587] Call Trace: [ 33.656150] [ 33.658280] dump_stack+0x185/0x1d0 [ 33.661884] ? csum_partial+0x78e/0x850 [ 33.665834] kmsan_report+0x142/0x240 [ 33.669609] __msan_warning_32+0x6c/0xb0 [ 33.673647] csum_partial+0x78e/0x850 [ 33.677425] csum_partial_ext+0x89/0xa0 [ 33.681375] __skb_checksum+0x6d4/0x1010 [ 33.685413] ? skb_checksum+0x120/0x120 [ 33.689361] skb_checksum+0xec/0x120 [ 33.693055] ? skb_checksum+0x120/0x120 [ 33.697019] ? csum_partial_ext+0xa0/0xa0 [ 33.701159] __skb_checksum_complete+0x90/0x400 [ 33.705804] __udp6_lib_rcv+0x21e1/0x3920 [ 33.709926] ? ip6_input_finish+0x55c/0x2110 [ 33.714312] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 33.719653] udpv6_rcv+0x5c/0x70 [ 33.722993] ? udp_v6_early_demux+0x11a0/0x11a0 [ 33.727641] ip6_input_finish+0xa62/0x2110 [ 33.731852] ? ip6table_filter_hook+0xb5/0xe0 [ 33.736325] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 33.741663] ? ip6_input_finish+0x12a1/0x2110 [ 33.746137] ip6_input+0x294/0x320 [ 33.749654] ? ip6_input+0x320/0x320 [ 33.753346] ? ipv6_rcv+0x26d0/0x26d0 [ 33.757124] ipv6_rcv+0x20ec/0x26d0 [ 33.760732] ? local_bh_enable+0x40/0x40 [ 33.764774] __netif_receive_skb_core+0x47cf/0x4a80 [ 33.769768] ? kmsan_internal_memset_shadow_inline+0xd0/0xd0 [ 33.775540] ? ip6_rcv_finish+0x4d0/0x4d0 [ 33.779663] process_backlog+0x62d/0xe20 [ 33.783700] ? rps_trigger_softirq+0x2f0/0x2f0 [ 33.788257] net_rx_action+0x7c1/0x1a70 [ 33.792212] ? net_tx_action+0xab0/0xab0 [ 33.796248] __do_softirq+0x56d/0x93d [ 33.800038] do_softirq_own_stack+0x2a/0x40 [ 33.804343] [ 33.806561] __local_bh_enable_ip+0x114/0x140 [ 33.811049] local_bh_enable+0x36/0x40 [ 33.814920] ip6_finish_output2+0x1b6c/0x1f20 [ 33.819397] ip6_finish_output+0xb3f/0xc00 [ 33.823608] ip6_output+0x597/0x6c0 [ 33.827209] ? ip6_output+0x6c0/0x6c0 [ 33.830986] ? ac6_seq_show+0x200/0x200 [ 33.834944] ip6_local_out+0x573/0x640 [ 33.838808] ? __ip6_local_out+0x4f0/0x4f0 [ 33.843031] ip6_send_skb+0xfa/0x380 [ 33.846735] udp_v6_send_skb+0x116a/0x1880 [ 33.850949] udpv6_sendmsg+0x15f4/0x45b0 [ 33.854993] ? rw_copy_check_uvector+0x5af/0x6c0 [ 33.859729] ? rw_copy_check_uvector+0x643/0x6c0 [ 33.864462] ? ip_copy_metadata+0xac0/0xac0 [ 33.868762] ? udpv6_queue_rcv_skb+0x1c60/0x1c60 [ 33.873493] inet_sendmsg+0x48d/0x740 [ 33.877269] ? security_socket_sendmsg+0x9e/0x210 [ 33.882090] ? inet_getname+0x500/0x500 [ 33.886050] ___sys_sendmsg+0xec0/0x1310 [ 33.890097] ? __fdget+0x4e/0x60 [ 33.893455] ? __fget_light+0x56/0x710 [ 33.897313] ? __fdget+0x4e/0x60 [ 33.900652] ? __fget_light+0x1dc/0x710 [ 33.904601] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 33.909938] ? __fget_light+0x1f5/0x710 [ 33.913891] SYSC_sendmsg+0x2a3/0x3d0 [ 33.917679] SyS_sendmsg+0x54/0x80 [ 33.921195] do_syscall_64+0x309/0x430 [ 33.925061] ? ___sys_sendmsg+0x1310/0x1310 [ 33.929361] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 33.934525] RIP: 0033:0x43fdf9 [ 33.937690] RSP: 002b:00007ffcfd8fd878 EFLAGS: 00000207 ORIG_RAX: 000000000000002e [ 33.945378] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043fdf9 [ 33.952621] RDX: 0000000000000000 RSI: 0000000020610fc8 RDI: 0000000000000003 [ 33.959868] RBP: 00000000006ca018 R08: 000000000000001c R09: 000000000000001c [ 33.967113] R10: 00000000205fa000 R11: 0000000000000207 R12: 0000000000401720 [ 33.974356] R13: 00000000004017b0 R14: 0000000000000000 R15: 0000000000000000 [ 33.981601] [ 33.983201] Uninit was created at: [ 33.986723] kmsan_alloc_meta_for_pages+0x161/0x3a0 [ 33.991714] kmsan_alloc_page+0x82/0xe0 [ 33.995667] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 34.000395] alloc_pages_current+0x6b5/0x970 [ 34.004779] skb_page_frag_refill+0x3ba/0x5e0 [ 34.009248] sk_page_frag_refill+0xa4/0x340 [ 34.013550] __ip6_append_data+0x1a20/0x4bb0 [ 34.017936] ip6_append_data+0x40e/0x6b0 [ 34.021971] udpv6_sendmsg+0xfd5/0x45b0 [ 34.025918] inet_sendmsg+0x48d/0x740 [ 34.029691] ___sys_sendmsg+0xec0/0x1310 [ 34.033748] SYSC_sendmsg+0x2a3/0x3d0 [ 34.037524] SyS_sendmsg+0x54/0x80 [ 34.041045] do_syscall_64+0x309/0x430 [ 34.044918] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 34.050080] ================================================================== [ 34.057409] Disabling lock debugging due to kernel taint [ 34.062832] Kernel panic - not syncing: panic_on_warn set ... [ 34.062832] [ 34.070173] CPU: 1 PID: 3582 Comm: syzkaller804209 Tainted: G B 4.16.0+ #82 [ 34.078456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 34.087782] Call Trace: [ 34.090338] [ 34.092470] dump_stack+0x185/0x1d0 [ 34.096087] panic+0x39d/0x940 [ 34.099274] ? csum_partial+0x78e/0x850 [ 34.103226] kmsan_report+0x238/0x240 [ 34.107001] __msan_warning_32+0x6c/0xb0 [ 34.111051] csum_partial+0x78e/0x850 [ 34.114831] csum_partial_ext+0x89/0xa0 [ 34.119341] __skb_checksum+0x6d4/0x1010 [ 34.123384] ? skb_checksum+0x120/0x120 [ 34.127337] skb_checksum+0xec/0x120 [ 34.131034] ? skb_checksum+0x120/0x120 [ 34.134991] ? csum_partial_ext+0xa0/0xa0 [ 34.139121] __skb_checksum_complete+0x90/0x400 [ 34.143768] __udp6_lib_rcv+0x21e1/0x3920 [ 34.147892] ? ip6_input_finish+0x55c/0x2110 [ 34.152277] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 34.157622] udpv6_rcv+0x5c/0x70 [ 34.160966] ? udp_v6_early_demux+0x11a0/0x11a0 [ 34.165610] ip6_input_finish+0xa62/0x2110 [ 34.169821] ? ip6table_filter_hook+0xb5/0xe0 [ 34.174291] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 34.179635] ? ip6_input_finish+0x12a1/0x2110 [ 34.184119] ip6_input+0x294/0x320 [ 34.187640] ? ip6_input+0x320/0x320 [ 34.191327] ? ipv6_rcv+0x26d0/0x26d0 [ 34.195100] ipv6_rcv+0x20ec/0x26d0 [ 34.198700] ? local_bh_enable+0x40/0x40 [ 34.202752] __netif_receive_skb_core+0x47cf/0x4a80 [ 34.207747] ? kmsan_internal_memset_shadow_inline+0xd0/0xd0 [ 34.213528] ? ip6_rcv_finish+0x4d0/0x4d0 [ 34.217651] process_backlog+0x62d/0xe20 [ 34.221690] ? rps_trigger_softirq+0x2f0/0x2f0 [ 34.226245] net_rx_action+0x7c1/0x1a70 [ 34.230196] ? net_tx_action+0xab0/0xab0 [ 34.234232] __do_softirq+0x56d/0x93d [ 34.238014] do_softirq_own_stack+0x2a/0x40 [ 34.242315] [ 34.244528] __local_bh_enable_ip+0x114/0x140 [ 34.249000] local_bh_enable+0x36/0x40 [ 34.252872] ip6_finish_output2+0x1b6c/0x1f20 [ 34.257348] ip6_finish_output+0xb3f/0xc00 [ 34.261558] ip6_output+0x597/0x6c0 [ 34.265159] ? ip6_output+0x6c0/0x6c0 [ 34.270442] ? ac6_seq_show+0x200/0x200 [ 34.274401] ip6_local_out+0x573/0x640 [ 34.278263] ? __ip6_local_out+0x4f0/0x4f0 [ 34.282478] ip6_send_skb+0xfa/0x380 [ 34.286172] udp_v6_send_skb+0x116a/0x1880 [ 34.290386] udpv6_sendmsg+0x15f4/0x45b0 [ 34.294430] ? rw_copy_check_uvector+0x5af/0x6c0 [ 34.299161] ? rw_copy_check_uvector+0x643/0x6c0 [ 34.303891] ? ip_copy_metadata+0xac0/0xac0 [ 34.308190] ? udpv6_queue_rcv_skb+0x1c60/0x1c60 [ 34.312922] inet_sendmsg+0x48d/0x740 [ 34.316698] ? security_socket_sendmsg+0x9e/0x210 [ 34.321517] ? inet_getname+0x500/0x500 [ 34.325468] ___sys_sendmsg+0xec0/0x1310 [ 34.329506] ? __fdget+0x4e/0x60 [ 34.332847] ? __fget_light+0x56/0x710 [ 34.336715] ? __fdget+0x4e/0x60 [ 34.340063] ? __fget_light+0x1dc/0x710 [ 34.344033] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 34.349377] ? __fget_light+0x1f5/0x710 [ 34.353330] SYSC_sendmsg+0x2a3/0x3d0 [ 34.357108] SyS_sendmsg+0x54/0x80 [ 34.360623] do_syscall_64+0x309/0x430 [ 34.364484] ? ___sys_sendmsg+0x1310/0x1310 [ 34.368785] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 34.373947] RIP: 0033:0x43fdf9 [ 34.377112] RSP: 002b:00007ffcfd8fd878 EFLAGS: 00000207 ORIG_RAX: 000000000000002e [ 34.384792] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043fdf9 [ 34.392128] RDX: 0000000000000000 RSI: 0000000020610fc8 RDI: 0000000000000003 [ 34.399373] RBP: 00000000006ca018 R08: 000000000000001c R09: 000000000000001c [ 34.406616] R10: 00000000205fa000 R11: 0000000000000207 R12: 0000000000401720 [ 34.413859] R13: 00000000004017b0 R14: 0000000000000000 R15: 0000000000000000 [ 34.421555] Dumping ftrace buffer: [ 34.425072] (ftrace buffer empty) [ 34.428752] Kernel Offset: disabled [ 34.432351] Rebooting in 86400 seconds..