INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.14' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 31.960676] ================================================================== [ 31.968077] BUG: KMSAN: uninit-value in csum_partial+0x78e/0x850 [ 31.974209] CPU: 0 PID: 3577 Comm: syzkaller910982 Not tainted 4.16.0+ #83 [ 31.981192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 31.990520] Call Trace: [ 31.993078] [ 31.995205] dump_stack+0x185/0x1d0 [ 31.998806] ? csum_partial+0x78e/0x850 [ 32.002757] kmsan_report+0x142/0x240 [ 32.006535] __msan_warning_32+0x6c/0xb0 [ 32.010577] csum_partial+0x78e/0x850 [ 32.014356] csum_partial_ext+0x89/0xa0 [ 32.018303] __skb_checksum+0x6d4/0x1010 [ 32.022345] ? skb_checksum+0x120/0x120 [ 32.026292] skb_checksum+0xec/0x120 [ 32.029980] ? skb_checksum+0x120/0x120 [ 32.033925] ? csum_partial_ext+0xa0/0xa0 [ 32.038054] __skb_checksum_complete+0x90/0x400 [ 32.042700] udp6_csum_init+0x94f/0x10c0 [ 32.046738] __udp6_lib_rcv+0x534/0x3920 [ 32.050776] ? ip6_input_finish+0x55c/0x2110 [ 32.055162] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 32.060507] udpv6_rcv+0x5c/0x70 [ 32.063850] ? udp_v6_early_demux+0x11a0/0x11a0 [ 32.068492] ip6_input_finish+0xa62/0x2110 [ 32.072702] ? ip6table_filter_hook+0xb5/0xe0 [ 32.077169] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 32.082506] ? ip6_input_finish+0x12a1/0x2110 [ 32.086973] ip6_input+0x294/0x320 [ 32.090487] ? ip6_input+0x320/0x320 [ 32.094175] ? ipv6_rcv+0x26d0/0x26d0 [ 32.097954] ipv6_rcv+0x20ec/0x26d0 [ 32.101555] ? local_bh_enable+0x40/0x40 [ 32.105594] __netif_receive_skb_core+0x47cf/0x4a80 [ 32.110587] ? kmsan_internal_memset_shadow_inline+0xd0/0xd0 [ 32.116360] ? proc_pident_lookup+0x451/0x550 [ 32.120828] ? ip6_rcv_finish+0x4d0/0x4d0 [ 32.124950] process_backlog+0x62d/0xe20 [ 32.128994] ? rps_trigger_softirq+0x2f0/0x2f0 [ 32.133551] net_rx_action+0x7c1/0x1a70 [ 32.137500] ? net_tx_action+0xab0/0xab0 [ 32.141536] __do_softirq+0x56d/0x93d [ 32.145315] do_softirq_own_stack+0x2a/0x40 [ 32.149612] [ 32.151828] __local_bh_enable_ip+0x114/0x140 [ 32.156305] local_bh_enable+0x36/0x40 [ 32.160170] ip6_finish_output2+0x1b6c/0x1f20 [ 32.164643] ip6_finish_output+0xb3f/0xc00 [ 32.168855] ip6_output+0x597/0x6c0 [ 32.172454] ? ip6_output+0x6c0/0x6c0 [ 32.176229] ? ac6_seq_show+0x200/0x200 [ 32.180178] ip6_local_out+0x573/0x640 [ 32.184046] ? __ip6_local_out+0x4f0/0x4f0 [ 32.188259] ip6_send_skb+0xfa/0x380 [ 32.191949] udp_v6_send_skb+0x116a/0x1880 [ 32.196171] udpv6_sendmsg+0x15f4/0x45b0 [ 32.200209] ? rw_copy_check_uvector+0x5af/0x6c0 [ 32.204938] ? rw_copy_check_uvector+0x643/0x6c0 [ 32.209670] ? ip_copy_metadata+0xac0/0xac0 [ 32.213968] ? udpv6_queue_rcv_skb+0x1c60/0x1c60 [ 32.218696] inet_sendmsg+0x48d/0x740 [ 32.222470] ? security_socket_sendmsg+0x9e/0x210 [ 32.227288] ? inet_getname+0x500/0x500 [ 32.231237] ___sys_sendmsg+0xec0/0x1310 [ 32.235277] ? __fdget+0x4e/0x60 [ 32.238619] ? __fget_light+0x56/0x710 [ 32.242476] ? __fdget+0x4e/0x60 [ 32.245813] ? __fget_light+0x1dc/0x710 [ 32.249769] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 32.255111] ? __fget_light+0x1f5/0x710 [ 32.259063] SYSC_sendmsg+0x2a3/0x3d0 [ 32.262839] SyS_sendmsg+0x54/0x80 [ 32.266351] do_syscall_64+0x309/0x430 [ 32.270213] ? ___sys_sendmsg+0x1310/0x1310 [ 32.274509] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 32.279672] RIP: 0033:0x440439 [ 32.282834] RSP: 002b:00007ffcadedf408 EFLAGS: 00000217 ORIG_RAX: 000000000000002e [ 32.290514] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440439 [ 32.297756] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000003 [ 32.305000] RBP: 00000000006ca018 R08: 00000000004002c8 R09: 00000000004002c8 [ 32.312250] R10: 00000000004002c8 R11: 0000000000000217 R12: 0000000000401d60 [ 32.319491] R13: 0000000000401df0 R14: 0000000000000000 R15: 0000000000000000 [ 32.326745] [ 32.328346] Uninit was created at: [ 32.331859] kmsan_alloc_meta_for_pages+0x161/0x3a0 [ 32.336845] kmsan_alloc_page+0x82/0xe0 [ 32.340791] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 32.345517] alloc_pages_current+0x6b5/0x970 [ 32.349899] skb_page_frag_refill+0x3ba/0x5e0 [ 32.354365] sk_page_frag_refill+0xa4/0x340 [ 32.358659] __ip6_append_data+0x1a20/0x4bb0 [ 32.363047] ip6_append_data+0x40e/0x6b0 [ 32.367081] udpv6_sendmsg+0xfd5/0x45b0 [ 32.371034] inet_sendmsg+0x48d/0x740 [ 32.374810] ___sys_sendmsg+0xec0/0x1310 [ 32.378843] SYSC_sendmsg+0x2a3/0x3d0 [ 32.382621] SyS_sendmsg+0x54/0x80 [ 32.386134] do_syscall_64+0x309/0x430 [ 32.389996] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 32.395157] ================================================================== [ 32.402493] Disabling lock debugging due to kernel taint [ 32.407914] Kernel panic - not syncing: panic_on_warn set ... [ 32.407914] [ 32.415251] CPU: 0 PID: 3577 Comm: syzkaller910982 Tainted: G B 4.16.0+ #83 [ 32.423536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 32.432859] Call Trace: [ 32.435413] [ 32.437541] dump_stack+0x185/0x1d0 [ 32.441141] panic+0x39d/0x940 [ 32.444322] ? csum_partial+0x78e/0x850 [ 32.448268] kmsan_report+0x238/0x240 [ 32.452049] __msan_warning_32+0x6c/0xb0 [ 32.456083] csum_partial+0x78e/0x850 [ 32.459862] csum_partial_ext+0x89/0xa0 [ 32.463811] __skb_checksum+0x6d4/0x1010 [ 32.467848] ? skb_checksum+0x120/0x120 [ 32.471798] skb_checksum+0xec/0x120 [ 32.475485] ? skb_checksum+0x120/0x120 [ 32.479430] ? csum_partial_ext+0xa0/0xa0 [ 32.483557] __skb_checksum_complete+0x90/0x400 [ 32.488202] udp6_csum_init+0x94f/0x10c0 [ 32.492248] __udp6_lib_rcv+0x534/0x3920 [ 32.496285] ? ip6_input_finish+0x55c/0x2110 [ 32.500667] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 32.506012] udpv6_rcv+0x5c/0x70 [ 32.509361] ? udp_v6_early_demux+0x11a0/0x11a0 [ 32.514002] ip6_input_finish+0xa62/0x2110 [ 32.518220] ? ip6table_filter_hook+0xb5/0xe0 [ 32.522688] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 32.528036] ? ip6_input_finish+0x12a1/0x2110 [ 32.532509] ip6_input+0x294/0x320 [ 32.536031] ? ip6_input+0x320/0x320 [ 32.539723] ? ipv6_rcv+0x26d0/0x26d0 [ 32.543496] ipv6_rcv+0x20ec/0x26d0 [ 32.547098] ? local_bh_enable+0x40/0x40 [ 32.551137] __netif_receive_skb_core+0x47cf/0x4a80 [ 32.556129] ? kmsan_internal_memset_shadow_inline+0xd0/0xd0 [ 32.561903] ? proc_pident_lookup+0x451/0x550 [ 32.566372] ? ip6_rcv_finish+0x4d0/0x4d0 [ 32.570492] process_backlog+0x62d/0xe20 [ 32.574527] ? rps_trigger_softirq+0x2f0/0x2f0 [ 32.579079] net_rx_action+0x7c1/0x1a70 [ 32.583041] ? net_tx_action+0xab0/0xab0 [ 32.587083] __do_softirq+0x56d/0x93d [ 32.590860] do_softirq_own_stack+0x2a/0x40 [ 32.595149] [ 32.597362] __local_bh_enable_ip+0x114/0x140 [ 32.601829] local_bh_enable+0x36/0x40 [ 32.605689] ip6_finish_output2+0x1b6c/0x1f20 [ 32.610163] ip6_finish_output+0xb3f/0xc00 [ 32.614372] ip6_output+0x597/0x6c0 [ 32.617973] ? ip6_output+0x6c0/0x6c0 [ 32.621750] ? ac6_seq_show+0x200/0x200 [ 32.625698] ip6_local_out+0x573/0x640 [ 32.629558] ? __ip6_local_out+0x4f0/0x4f0 [ 32.633767] ip6_send_skb+0xfa/0x380 [ 32.637458] udp_v6_send_skb+0x116a/0x1880 [ 32.641678] udpv6_sendmsg+0x15f4/0x45b0 [ 32.645717] ? rw_copy_check_uvector+0x5af/0x6c0 [ 32.650448] ? rw_copy_check_uvector+0x643/0x6c0 [ 32.655180] ? ip_copy_metadata+0xac0/0xac0 [ 32.659484] ? udpv6_queue_rcv_skb+0x1c60/0x1c60 [ 32.664214] inet_sendmsg+0x48d/0x740 [ 32.667987] ? security_socket_sendmsg+0x9e/0x210 [ 32.672805] ? inet_getname+0x500/0x500 [ 32.676752] ___sys_sendmsg+0xec0/0x1310 [ 32.680788] ? __fdget+0x4e/0x60 [ 32.684126] ? __fget_light+0x56/0x710 [ 32.687984] ? __fdget+0x4e/0x60 [ 32.691327] ? __fget_light+0x1dc/0x710 [ 32.695274] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 32.700607] ? __fget_light+0x1f5/0x710 [ 32.704565] SYSC_sendmsg+0x2a3/0x3d0 [ 32.708344] SyS_sendmsg+0x54/0x80 [ 32.711864] do_syscall_64+0x309/0x430 [ 32.715733] ? ___sys_sendmsg+0x1310/0x1310 [ 32.720038] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 32.725203] RIP: 0033:0x440439 [ 32.728366] RSP: 002b:00007ffcadedf408 EFLAGS: 00000217 ORIG_RAX: 000000000000002e [ 32.736050] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440439 [ 32.743291] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000003 [ 32.750536] RBP: 00000000006ca018 R08: 00000000004002c8 R09: 00000000004002c8 [ 32.757781] R10: 00000000004002c8 R11: 0000000000000217 R12: 0000000000401d60 [ 32.765030] R13: 0000000000401df0 R14: 0000000000000000 R15: 0000000000000000 [ 32.772737] Dumping ftrace buffer: [ 32.776249] (ftrace buffer empty) [ 32.779930] Kernel Offset: disabled [ 32.783530] Rebooting in 86400 seconds..