INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.11' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 30.570871] ================================================================== [ 30.578287] BUG: KMSAN: uninit-value in csum_partial+0x78e/0x850 [ 30.584416] CPU: 1 PID: 3495 Comm: syzkaller230733 Not tainted 4.16.0+ #82 [ 30.591403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 30.600742] Call Trace: [ 30.603307] [ 30.605443] dump_stack+0x185/0x1d0 [ 30.609051] ? csum_partial+0x78e/0x850 [ 30.613001] kmsan_report+0x142/0x240 [ 30.616778] __msan_warning_32+0x6c/0xb0 [ 30.620819] csum_partial+0x78e/0x850 [ 30.624608] csum_partial_ext+0x89/0xa0 [ 30.628560] __skb_checksum+0x6d4/0x1010 [ 30.632602] ? skb_checksum+0x120/0x120 [ 30.636557] skb_checksum+0xec/0x120 [ 30.640246] ? skb_checksum+0x120/0x120 [ 30.644198] ? csum_partial_ext+0xa0/0xa0 [ 30.648326] __skb_checksum_complete+0x90/0x400 [ 30.652976] udp6_csum_init+0x94f/0x10c0 [ 30.657023] __udp6_lib_rcv+0x534/0x3920 [ 30.661066] ? ip6_input_finish+0x55c/0x2110 [ 30.665458] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 30.670810] udpv6_rcv+0x5c/0x70 [ 30.674161] ? udp_v6_early_demux+0x11a0/0x11a0 [ 30.678813] ip6_input_finish+0xa62/0x2110 [ 30.683038] ? ip6table_filter_hook+0xb5/0xe0 [ 30.687519] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 30.692866] ? ip6_input_finish+0x12a1/0x2110 [ 30.697338] ip6_input+0x294/0x320 [ 30.700860] ? ip6_input+0x320/0x320 [ 30.704555] ? ipv6_rcv+0x26d0/0x26d0 [ 30.708332] ipv6_rcv+0x20ec/0x26d0 [ 30.712574] ? local_bh_enable+0x40/0x40 [ 30.716622] __netif_receive_skb_core+0x47cf/0x4a80 [ 30.721624] ? kmsan_internal_memset_shadow_inline+0xd0/0xd0 [ 30.727406] ? ip6_rcv_finish+0x4d0/0x4d0 [ 30.731535] process_backlog+0x62d/0xe20 [ 30.735577] ? rps_trigger_softirq+0x2f0/0x2f0 [ 30.740142] net_rx_action+0x7c1/0x1a70 [ 30.744112] ? net_tx_action+0xab0/0xab0 [ 30.748166] __do_softirq+0x56d/0x93d [ 30.751945] do_softirq_own_stack+0x2a/0x40 [ 30.756242] [ 30.758457] __local_bh_enable_ip+0x114/0x140 [ 30.762943] local_bh_enable+0x36/0x40 [ 30.766811] ip6_finish_output2+0x1b6c/0x1f20 [ 30.771291] ip6_finish_output+0xb3f/0xc00 [ 30.775507] ip6_output+0x597/0x6c0 [ 30.779116] ? ip6_output+0x6c0/0x6c0 [ 30.782898] ? ac6_seq_show+0x200/0x200 [ 30.786856] ip6_local_out+0x573/0x640 [ 30.790726] ? __ip6_local_out+0x4f0/0x4f0 [ 30.794956] ip6_send_skb+0xfa/0x380 [ 30.798655] udp_v6_send_skb+0x116a/0x1880 [ 30.802874] udpv6_sendmsg+0x15f4/0x45b0 [ 30.806918] ? rw_copy_check_uvector+0x5af/0x6c0 [ 30.811655] ? rw_copy_check_uvector+0x643/0x6c0 [ 30.816393] ? ip_copy_metadata+0xac0/0xac0 [ 30.820696] ? udpv6_queue_rcv_skb+0x1c60/0x1c60 [ 30.825431] inet_sendmsg+0x48d/0x740 [ 30.829214] ? security_socket_sendmsg+0x9e/0x210 [ 30.834036] ? inet_getname+0x500/0x500 [ 30.837989] ___sys_sendmsg+0xec0/0x1310 [ 30.842033] ? __fdget+0x4e/0x60 [ 30.845395] ? __fget_light+0x56/0x710 [ 30.849276] ? __fdget+0x4e/0x60 [ 30.852635] ? __fget_light+0x1dc/0x710 [ 30.856594] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 30.861952] ? __fget_light+0x1f5/0x710 [ 30.865916] SYSC_sendmsg+0x2a3/0x3d0 [ 30.869702] SyS_sendmsg+0x54/0x80 [ 30.873225] do_syscall_64+0x309/0x430 [ 30.877104] ? ___sys_sendmsg+0x1310/0x1310 [ 30.881418] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 30.886590] RIP: 0033:0x440189 [ 30.889760] RSP: 002b:00007ffefb606b28 EFLAGS: 00000217 ORIG_RAX: 000000000000002e [ 30.897458] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440189 [ 30.904709] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000003 [ 30.911956] RBP: 00000000006ca018 R08: 0000000000000001 R09: 0000000000000001 [ 30.919212] R10: 0000000000000001 R11: 0000000000000217 R12: 0000000000401ab0 [ 30.926458] R13: 0000000000401b40 R14: 0000000000000000 R15: 0000000000000000 [ 30.933709] [ 30.935314] Uninit was created at: [ 30.938837] kmsan_alloc_meta_for_pages+0x161/0x3a0 [ 30.943832] kmsan_alloc_page+0x82/0xe0 [ 30.947784] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 30.952516] alloc_pages_current+0x6b5/0x970 [ 30.956904] skb_page_frag_refill+0x3ba/0x5e0 [ 30.961385] sk_page_frag_refill+0xa4/0x340 [ 30.965694] __ip6_append_data+0x1a20/0x4bb0 [ 30.970090] ip6_append_data+0x40e/0x6b0 [ 30.974132] udpv6_sendmsg+0xfd5/0x45b0 [ 30.978094] inet_sendmsg+0x48d/0x740 [ 30.981878] ___sys_sendmsg+0xec0/0x1310 [ 30.985924] SYSC_sendmsg+0x2a3/0x3d0 [ 30.989716] SyS_sendmsg+0x54/0x80 [ 30.993246] do_syscall_64+0x309/0x430 [ 30.997122] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 31.002294] ================================================================== [ 31.009626] Disabling lock debugging due to kernel taint [ 31.015048] Kernel panic - not syncing: panic_on_warn set ... [ 31.015048] [ 31.022392] CPU: 1 PID: 3495 Comm: syzkaller230733 Tainted: G B 4.16.0+ #82 [ 31.030682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 31.040017] Call Trace: [ 31.042578] [ 31.044712] dump_stack+0x185/0x1d0 [ 31.048321] panic+0x39d/0x940 [ 31.051503] ? csum_partial+0x78e/0x850 [ 31.055454] kmsan_report+0x238/0x240 [ 31.059237] __msan_warning_32+0x6c/0xb0 [ 31.063277] csum_partial+0x78e/0x850 [ 31.067059] csum_partial_ext+0x89/0xa0 [ 31.071015] __skb_checksum+0x6d4/0x1010 [ 31.075056] ? skb_checksum+0x120/0x120 [ 31.079009] skb_checksum+0xec/0x120 [ 31.082701] ? skb_checksum+0x120/0x120 [ 31.086651] ? csum_partial_ext+0xa0/0xa0 [ 31.090780] __skb_checksum_complete+0x90/0x400 [ 31.095433] udp6_csum_init+0x94f/0x10c0 [ 31.099489] __udp6_lib_rcv+0x534/0x3920 [ 31.103533] ? ip6_input_finish+0x55c/0x2110 [ 31.107922] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 31.113278] udpv6_rcv+0x5c/0x70 [ 31.116623] ? udp_v6_early_demux+0x11a0/0x11a0 [ 31.121274] ip6_input_finish+0xa62/0x2110 [ 31.125492] ? ip6table_filter_hook+0xb5/0xe0 [ 31.129970] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 31.135313] ? ip6_input_finish+0x12a1/0x2110 [ 31.139786] ip6_input+0x294/0x320 [ 31.143306] ? ip6_input+0x320/0x320 [ 31.147011] ? ipv6_rcv+0x26d0/0x26d0 [ 31.150790] ipv6_rcv+0x20ec/0x26d0 [ 31.154396] ? local_bh_enable+0x40/0x40 [ 31.158444] __netif_receive_skb_core+0x47cf/0x4a80 [ 31.163450] ? kmsan_internal_memset_shadow_inline+0xd0/0xd0 [ 31.169230] ? ip6_rcv_finish+0x4d0/0x4d0 [ 31.173359] process_backlog+0x62d/0xe20 [ 31.177405] ? rps_trigger_softirq+0x2f0/0x2f0 [ 31.181976] net_rx_action+0x7c1/0x1a70 [ 31.185931] ? net_tx_action+0xab0/0xab0 [ 31.189986] __do_softirq+0x56d/0x93d [ 31.193777] do_softirq_own_stack+0x2a/0x40 [ 31.198074] [ 31.200291] __local_bh_enable_ip+0x114/0x140 [ 31.204767] local_bh_enable+0x36/0x40 [ 31.208634] ip6_finish_output2+0x1b6c/0x1f20 [ 31.213129] ip6_finish_output+0xb3f/0xc00 [ 31.217376] ip6_output+0x597/0x6c0 [ 31.221010] ? ip6_output+0x6c0/0x6c0 [ 31.224800] ? ac6_seq_show+0x200/0x200 [ 31.228764] ip6_local_out+0x573/0x640 [ 31.232636] ? __ip6_local_out+0x4f0/0x4f0 [ 31.236852] ip6_send_skb+0xfa/0x380 [ 31.241178] udp_v6_send_skb+0x116a/0x1880 [ 31.245404] udpv6_sendmsg+0x15f4/0x45b0 [ 31.249447] ? rw_copy_check_uvector+0x5af/0x6c0 [ 31.254184] ? rw_copy_check_uvector+0x643/0x6c0 [ 31.258918] ? ip_copy_metadata+0xac0/0xac0 [ 31.263224] ? udpv6_queue_rcv_skb+0x1c60/0x1c60 [ 31.267958] inet_sendmsg+0x48d/0x740 [ 31.271736] ? security_socket_sendmsg+0x9e/0x210 [ 31.276556] ? inet_getname+0x500/0x500 [ 31.280510] ___sys_sendmsg+0xec0/0x1310 [ 31.284552] ? __fdget+0x4e/0x60 [ 31.287894] ? __fget_light+0x56/0x710 [ 31.291759] ? __fdget+0x4e/0x60 [ 31.295103] ? __fget_light+0x1dc/0x710 [ 31.299057] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 31.304399] ? __fget_light+0x1f5/0x710 [ 31.308374] SYSC_sendmsg+0x2a3/0x3d0 [ 31.312161] SyS_sendmsg+0x54/0x80 [ 31.315695] do_syscall_64+0x309/0x430 [ 31.319566] ? ___sys_sendmsg+0x1310/0x1310 [ 31.323873] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 31.329047] RIP: 0033:0x440189 [ 31.332227] RSP: 002b:00007ffefb606b28 EFLAGS: 00000217 ORIG_RAX: 000000000000002e [ 31.339916] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440189 [ 31.347168] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000003 [ 31.354417] RBP: 00000000006ca018 R08: 0000000000000001 R09: 0000000000000001 [ 31.361667] R10: 0000000000000001 R11: 0000000000000217 R12: 0000000000401ab0 [ 31.368930] R13: 0000000000401b40 R14: 0000000000000000 R15: 0000000000000000 [ 31.376636] Dumping ftrace buffer: [ 31.380153] (ftrace buffer empty) [ 31.383839] Kernel Offset: disabled [ 31.387441] Rebooting in 86400 seconds..