INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.27' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 40.395522] ================================================================== [ 40.402913] BUG: KMSAN: uninit-value in csum_partial+0x78e/0x850 [ 40.409033] CPU: 0 PID: 3565 Comm: syzkaller187962 Not tainted 4.16.0+ #83 [ 40.416017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 40.425344] Call Trace: [ 40.427901] [ 40.430028] dump_stack+0x185/0x1d0 [ 40.433628] ? csum_partial+0x78e/0x850 [ 40.437575] kmsan_report+0x142/0x240 [ 40.441352] __msan_warning_32+0x6c/0xb0 [ 40.445396] csum_partial+0x78e/0x850 [ 40.449173] csum_partial_ext+0x89/0xa0 [ 40.453121] __skb_checksum+0x6d4/0x1010 [ 40.457158] ? skb_checksum+0x120/0x120 [ 40.461107] skb_checksum+0xec/0x120 [ 40.464793] ? skb_checksum+0x120/0x120 [ 40.468742] ? csum_partial_ext+0xa0/0xa0 [ 40.472864] __skb_checksum_complete+0x90/0x400 [ 40.477510] udp6_csum_init+0x94f/0x10c0 [ 40.481548] __udp6_lib_rcv+0x534/0x3920 [ 40.485585] ? ip6_input_finish+0x55c/0x2110 [ 40.489969] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 40.495311] udpv6_rcv+0x5c/0x70 [ 40.498651] ? udp_v6_early_demux+0x11a0/0x11a0 [ 40.503293] ip6_input_finish+0xa62/0x2110 [ 40.507503] ? ip6table_filter_hook+0xb5/0xe0 [ 40.511973] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 40.517311] ? ip6_input_finish+0x12a1/0x2110 [ 40.521782] ip6_input+0x294/0x320 [ 40.525295] ? ip6_input+0x320/0x320 [ 40.528983] ? ipv6_rcv+0x26d0/0x26d0 [ 40.532760] ipv6_rcv+0x20ec/0x26d0 [ 40.536365] ? local_bh_enable+0x40/0x40 [ 40.540417] __netif_receive_skb_core+0x47cf/0x4a80 [ 40.545412] ? kmsan_internal_memset_shadow_inline+0xd0/0xd0 [ 40.551183] ? ip6_rcv_finish+0x4d0/0x4d0 [ 40.555306] process_backlog+0x62d/0xe20 [ 40.559342] ? rps_trigger_softirq+0x2f0/0x2f0 [ 40.563896] net_rx_action+0x7c1/0x1a70 [ 40.567847] ? net_tx_action+0xab0/0xab0 [ 40.571883] __do_softirq+0x56d/0x93d [ 40.575660] do_softirq_own_stack+0x2a/0x40 [ 40.579949] [ 40.582162] __local_bh_enable_ip+0x114/0x140 [ 40.586632] local_bh_enable+0x36/0x40 [ 40.590494] ip6_finish_output2+0x1b6c/0x1f20 [ 40.594969] ip6_finish_output+0xb3f/0xc00 [ 40.599213] ip6_output+0x597/0x6c0 [ 40.602824] ? ip6_output+0x6c0/0x6c0 [ 40.606603] ? ac6_seq_show+0x200/0x200 [ 40.610552] ip6_local_out+0x573/0x640 [ 40.614416] ? __ip6_local_out+0x4f0/0x4f0 [ 40.618627] ip6_send_skb+0xfa/0x380 [ 40.622320] udp_v6_send_skb+0x116a/0x1880 [ 40.626545] udpv6_sendmsg+0x15f4/0x45b0 [ 40.630585] ? rw_copy_check_uvector+0x5af/0x6c0 [ 40.635314] ? rw_copy_check_uvector+0x643/0x6c0 [ 40.640047] ? ip_copy_metadata+0xac0/0xac0 [ 40.644345] ? udpv6_queue_rcv_skb+0x1c60/0x1c60 [ 40.649077] inet_sendmsg+0x48d/0x740 [ 40.652853] ? security_socket_sendmsg+0x9e/0x210 [ 40.657668] ? inet_getname+0x500/0x500 [ 40.661619] ___sys_sendmsg+0xec0/0x1310 [ 40.665659] ? __fdget+0x4e/0x60 [ 40.668997] ? __fget_light+0x56/0x710 [ 40.672856] ? __fdget+0x4e/0x60 [ 40.676194] ? __fget_light+0x1dc/0x710 [ 40.680141] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 40.685482] ? __fget_light+0x1f5/0x710 [ 40.689434] SYSC_sendmsg+0x2a3/0x3d0 [ 40.693212] SyS_sendmsg+0x54/0x80 [ 40.696724] do_syscall_64+0x309/0x430 [ 40.700589] ? ___sys_sendmsg+0x1310/0x1310 [ 40.704885] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 40.710046] RIP: 0033:0x43fee9 [ 40.713208] RSP: 002b:00007ffc7c7b16f8 EFLAGS: 00000217 ORIG_RAX: 000000000000002e [ 40.720886] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043fee9 [ 40.728130] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000003 [ 40.735378] RBP: 00000000006ca018 R08: 00000000004002c8 R09: 00000000004002c8 [ 40.742620] R10: 00000000004002c8 R11: 0000000000000217 R12: 0000000000401810 [ 40.749863] R13: 00000000004018a0 R14: 0000000000000000 R15: 0000000000000000 [ 40.757110] [ 40.758708] Uninit was created at: [ 40.762222] kmsan_alloc_meta_for_pages+0x161/0x3a0 [ 40.767210] kmsan_alloc_page+0x82/0xe0 [ 40.771159] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 40.775885] alloc_pages_current+0x6b5/0x970 [ 40.780264] skb_page_frag_refill+0x3ba/0x5e0 [ 40.784730] sk_page_frag_refill+0xa4/0x340 [ 40.789023] __ip6_append_data+0x1a20/0x4bb0 [ 40.793403] ip6_append_data+0x40e/0x6b0 [ 40.797436] udpv6_sendmsg+0xfd5/0x45b0 [ 40.801384] inet_sendmsg+0x48d/0x740 [ 40.805156] ___sys_sendmsg+0xec0/0x1310 [ 40.809189] SYSC_sendmsg+0x2a3/0x3d0 [ 40.812964] SyS_sendmsg+0x54/0x80 [ 40.816482] do_syscall_64+0x309/0x430 [ 40.820343] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 40.825509] ================================================================== [ 40.832838] Disabling lock debugging due to kernel taint [ 40.838257] Kernel panic - not syncing: panic_on_warn set ... [ 40.838257] [ 40.845593] CPU: 0 PID: 3565 Comm: syzkaller187962 Tainted: G B 4.16.0+ #83 [ 40.853876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 40.863201] Call Trace: [ 40.865759] [ 40.867884] dump_stack+0x185/0x1d0 [ 40.871485] panic+0x39d/0x940 [ 40.874659] ? csum_partial+0x78e/0x850 [ 40.878604] kmsan_report+0x238/0x240 [ 40.882380] __msan_warning_32+0x6c/0xb0 [ 40.886416] csum_partial+0x78e/0x850 [ 40.890195] csum_partial_ext+0x89/0xa0 [ 40.894142] __skb_checksum+0x6d4/0x1010 [ 40.898178] ? skb_checksum+0x120/0x120 [ 40.902125] skb_checksum+0xec/0x120 [ 40.905818] ? skb_checksum+0x120/0x120 [ 40.909764] ? csum_partial_ext+0xa0/0xa0 [ 40.913887] __skb_checksum_complete+0x90/0x400 [ 40.918531] udp6_csum_init+0x94f/0x10c0 [ 40.922578] __udp6_lib_rcv+0x534/0x3920 [ 40.926614] ? ip6_input_finish+0x55c/0x2110 [ 40.930997] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 40.936342] udpv6_rcv+0x5c/0x70 [ 40.939682] ? udp_v6_early_demux+0x11a0/0x11a0 [ 40.944324] ip6_input_finish+0xa62/0x2110 [ 40.948548] ? ip6table_filter_hook+0xb5/0xe0 [ 40.953019] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 40.958358] ? ip6_input_finish+0x12a1/0x2110 [ 40.962830] ip6_input+0x294/0x320 [ 40.966345] ? ip6_input+0x320/0x320 [ 40.970035] ? ipv6_rcv+0x26d0/0x26d0 [ 40.973810] ipv6_rcv+0x20ec/0x26d0 [ 40.977410] ? local_bh_enable+0x40/0x40 [ 40.981451] __netif_receive_skb_core+0x47cf/0x4a80 [ 40.986857] ? kmsan_internal_memset_shadow_inline+0xd0/0xd0 [ 40.992632] ? ip6_rcv_finish+0x4d0/0x4d0 [ 40.996753] process_backlog+0x62d/0xe20 [ 41.000791] ? rps_trigger_softirq+0x2f0/0x2f0 [ 41.005346] net_rx_action+0x7c1/0x1a70 [ 41.009298] ? net_tx_action+0xab0/0xab0 [ 41.013332] __do_softirq+0x56d/0x93d [ 41.017119] do_softirq_own_stack+0x2a/0x40 [ 41.021411] [ 41.023623] __local_bh_enable_ip+0x114/0x140 [ 41.028092] local_bh_enable+0x36/0x40 [ 41.031954] ip6_finish_output2+0x1b6c/0x1f20 [ 41.036431] ip6_finish_output+0xb3f/0xc00 [ 41.040641] ip6_output+0x597/0x6c0 [ 41.044240] ? ip6_output+0x6c0/0x6c0 [ 41.048016] ? ac6_seq_show+0x200/0x200 [ 41.051965] ip6_local_out+0x573/0x640 [ 41.055834] ? __ip6_local_out+0x4f0/0x4f0 [ 41.060047] ip6_send_skb+0xfa/0x380 [ 41.063739] udp_v6_send_skb+0x116a/0x1880 [ 41.067952] udpv6_sendmsg+0x15f4/0x45b0 [ 41.071992] ? rw_copy_check_uvector+0x5af/0x6c0 [ 41.076721] ? rw_copy_check_uvector+0x643/0x6c0 [ 41.081451] ? ip_copy_metadata+0xac0/0xac0 [ 41.085748] ? udpv6_queue_rcv_skb+0x1c60/0x1c60 [ 41.090479] inet_sendmsg+0x48d/0x740 [ 41.094253] ? security_socket_sendmsg+0x9e/0x210 [ 41.099070] ? inet_getname+0x500/0x500 [ 41.103016] ___sys_sendmsg+0xec0/0x1310 [ 41.107052] ? __fdget+0x4e/0x60 [ 41.110391] ? __fget_light+0x56/0x710 [ 41.114249] ? __fdget+0x4e/0x60 [ 41.117588] ? __fget_light+0x1dc/0x710 [ 41.121545] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 41.126893] ? __fget_light+0x1f5/0x710 [ 41.130844] SYSC_sendmsg+0x2a3/0x3d0 [ 41.134624] SyS_sendmsg+0x54/0x80 [ 41.138138] do_syscall_64+0x309/0x430 [ 41.142000] ? ___sys_sendmsg+0x1310/0x1310 [ 41.146297] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 41.151458] RIP: 0033:0x43fee9 [ 41.154622] RSP: 002b:00007ffc7c7b16f8 EFLAGS: 00000217 ORIG_RAX: 000000000000002e [ 41.162305] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043fee9 [ 41.169550] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000003 [ 41.176791] RBP: 00000000006ca018 R08: 00000000004002c8 R09: 00000000004002c8 [ 41.184033] R10: 00000000004002c8 R11: 0000000000000217 R12: 0000000000401810 [ 41.191283] R13: 00000000004018a0 R14: 0000000000000000 R15: 0000000000000000 [ 41.198994] Dumping ftrace buffer: [ 41.202515] (ftrace buffer empty) [ 41.206200] Kernel Offset: disabled [ 41.209798] Rebooting in 86400 seconds..