INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.22' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 30.485657] ================================================================== [ 30.493079] BUG: KMSAN: uninit-value in csum_partial+0x78e/0x850 [ 30.499219] CPU: 1 PID: 3580 Comm: syzkaller413885 Not tainted 4.16.0+ #83 [ 30.506211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 30.515550] Call Trace: [ 30.518113] [ 30.520247] dump_stack+0x185/0x1d0 [ 30.523858] ? csum_partial+0x78e/0x850 [ 30.527816] kmsan_report+0x142/0x240 [ 30.531604] __msan_warning_32+0x6c/0xb0 [ 30.535654] csum_partial+0x78e/0x850 [ 30.539449] csum_partial_ext+0x89/0xa0 [ 30.543416] __skb_checksum+0x6d4/0x1010 [ 30.547463] ? skb_checksum+0x120/0x120 [ 30.551420] skb_checksum+0xec/0x120 [ 30.555964] ? skb_checksum+0x120/0x120 [ 30.559926] ? csum_partial_ext+0xa0/0xa0 [ 30.564067] __skb_checksum_complete+0x90/0x400 [ 30.568717] udp6_csum_init+0x94f/0x10c0 [ 30.572765] __udp6_lib_rcv+0x534/0x3920 [ 30.576809] ? ip6_input_finish+0x55c/0x2110 [ 30.581205] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 30.586559] udpv6_rcv+0x5c/0x70 [ 30.589908] ? udp_v6_early_demux+0x11a0/0x11a0 [ 30.594576] ip6_input_finish+0xa62/0x2110 [ 30.598825] ? ip6table_filter_hook+0xb5/0xe0 [ 30.603324] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 30.608764] ? ip6_input_finish+0x12a1/0x2110 [ 30.613245] ip6_input+0x294/0x320 [ 30.616790] ? ip6_input+0x320/0x320 [ 30.620494] ? ipv6_rcv+0x26d0/0x26d0 [ 30.624287] ipv6_rcv+0x20ec/0x26d0 [ 30.627898] ? local_bh_enable+0x40/0x40 [ 30.631955] __netif_receive_skb_core+0x47cf/0x4a80 [ 30.636989] ? kmsan_internal_memset_shadow_inline+0xd0/0xd0 [ 30.642788] ? ip6_rcv_finish+0x4d0/0x4d0 [ 30.646926] process_backlog+0x62d/0xe20 [ 30.650985] ? rps_trigger_softirq+0x2f0/0x2f0 [ 30.655552] net_rx_action+0x7c1/0x1a70 [ 30.659512] ? net_tx_action+0xab0/0xab0 [ 30.663556] __do_softirq+0x56d/0x93d [ 30.667341] do_softirq_own_stack+0x2a/0x40 [ 30.671667] [ 30.673892] __local_bh_enable_ip+0x114/0x140 [ 30.678370] local_bh_enable+0x36/0x40 [ 30.682237] ip6_finish_output2+0x1b6c/0x1f20 [ 30.686721] ip6_finish_output+0xb3f/0xc00 [ 30.690948] ip6_output+0x597/0x6c0 [ 30.694574] ? ip6_output+0x6c0/0x6c0 [ 30.698358] ? ac6_seq_show+0x200/0x200 [ 30.702401] ip6_local_out+0x573/0x640 [ 30.706276] ? __ip6_local_out+0x4f0/0x4f0 [ 30.710498] ip6_send_skb+0xfa/0x380 [ 30.714202] udp_v6_send_skb+0x116a/0x1880 [ 30.718433] udpv6_sendmsg+0x15f4/0x45b0 [ 30.722484] ? rw_copy_check_uvector+0x5af/0x6c0 [ 30.727222] ? rw_copy_check_uvector+0x643/0x6c0 [ 30.731967] ? ip_copy_metadata+0xac0/0xac0 [ 30.736277] ? udpv6_queue_rcv_skb+0x1c60/0x1c60 [ 30.741023] inet_sendmsg+0x48d/0x740 [ 30.744825] ? security_socket_sendmsg+0x9e/0x210 [ 30.749652] ? inet_getname+0x500/0x500 [ 30.753612] ___sys_sendmsg+0xec0/0x1310 [ 30.757660] ? __fdget+0x4e/0x60 [ 30.761010] ? __fget_light+0x56/0x710 [ 30.764889] ? __fdget+0x4e/0x60 [ 30.768234] ? __fget_light+0x1dc/0x710 [ 30.772190] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 30.777537] ? __fget_light+0x1f5/0x710 [ 30.781503] SYSC_sendmsg+0x2a3/0x3d0 [ 30.785292] SyS_sendmsg+0x54/0x80 [ 30.788823] do_syscall_64+0x309/0x430 [ 30.792697] ? ___sys_sendmsg+0x1310/0x1310 [ 30.797009] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 30.802187] RIP: 0033:0x4400d9 [ 30.805357] RSP: 002b:00007ffd552e8c98 EFLAGS: 00000217 ORIG_RAX: 000000000000002e [ 30.813062] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004400d9 [ 30.820316] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000003 [ 30.827581] RBP: 00000000006ca018 R08: 0000000000000000 R09: 0000000000000000 [ 30.834843] R10: 0000000000000000 R11: 0000000000000217 R12: 0000000000401a00 [ 30.842104] R13: 0000000000401a90 R14: 0000000000000000 R15: 0000000000000000 [ 30.849372] [ 30.850979] Uninit was created at: [ 30.854505] kmsan_alloc_meta_for_pages+0x161/0x3a0 [ 30.859512] kmsan_alloc_page+0x82/0xe0 [ 30.863473] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 30.868212] alloc_pages_current+0x6b5/0x970 [ 30.872605] skb_page_frag_refill+0x3ba/0x5e0 [ 30.877081] sk_page_frag_refill+0xa4/0x340 [ 30.881386] __ip6_append_data+0x1a20/0x4bb0 [ 30.885776] ip6_append_data+0x40e/0x6b0 [ 30.889820] udpv6_sendmsg+0xfd5/0x45b0 [ 30.893775] inet_sendmsg+0x48d/0x740 [ 30.897555] ___sys_sendmsg+0xec0/0x1310 [ 30.901595] SYSC_sendmsg+0x2a3/0x3d0 [ 30.905376] SyS_sendmsg+0x54/0x80 [ 30.908899] do_syscall_64+0x309/0x430 [ 30.912768] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 30.917943] ================================================================== [ 30.925294] Disabling lock debugging due to kernel taint [ 30.930730] Kernel panic - not syncing: panic_on_warn set ... [ 30.930730] [ 30.938089] CPU: 1 PID: 3580 Comm: syzkaller413885 Tainted: G B 4.16.0+ #83 [ 30.946401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 30.955745] Call Trace: [ 30.958324] [ 30.960467] dump_stack+0x185/0x1d0 [ 30.964093] panic+0x39d/0x940 [ 30.967288] ? csum_partial+0x78e/0x850 [ 30.971264] kmsan_report+0x238/0x240 [ 30.975065] __msan_warning_32+0x6c/0xb0 [ 30.979118] csum_partial+0x78e/0x850 [ 30.982909] csum_partial_ext+0x89/0xa0 [ 30.986875] __skb_checksum+0x6d4/0x1010 [ 30.990917] ? skb_checksum+0x120/0x120 [ 30.994874] skb_checksum+0xec/0x120 [ 30.998579] ? skb_checksum+0x120/0x120 [ 31.002533] ? csum_partial_ext+0xa0/0xa0 [ 31.006667] __skb_checksum_complete+0x90/0x400 [ 31.011327] udp6_csum_init+0x94f/0x10c0 [ 31.015382] __udp6_lib_rcv+0x534/0x3920 [ 31.019434] ? ip6_input_finish+0x55c/0x2110 [ 31.023827] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 31.029183] udpv6_rcv+0x5c/0x70 [ 31.032539] ? udp_v6_early_demux+0x11a0/0x11a0 [ 31.037195] ip6_input_finish+0xa62/0x2110 [ 31.041418] ? ip6table_filter_hook+0xb5/0xe0 [ 31.045906] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 31.051262] ? ip6_input_finish+0x12a1/0x2110 [ 31.055742] ip6_input+0x294/0x320 [ 31.059262] ? ip6_input+0x320/0x320 [ 31.062984] ? ipv6_rcv+0x26d0/0x26d0 [ 31.066772] ipv6_rcv+0x20ec/0x26d0 [ 31.070385] ? local_bh_enable+0x40/0x40 [ 31.074440] __netif_receive_skb_core+0x47cf/0x4a80 [ 31.079441] ? kmsan_internal_memset_shadow_inline+0xd0/0xd0 [ 31.085223] ? ip6_rcv_finish+0x4d0/0x4d0 [ 31.089357] process_backlog+0x62d/0xe20 [ 31.093419] ? rps_trigger_softirq+0x2f0/0x2f0 [ 31.097986] net_rx_action+0x7c1/0x1a70 [ 31.101948] ? net_tx_action+0xab0/0xab0 [ 31.106003] __do_softirq+0x56d/0x93d [ 31.109801] do_softirq_own_stack+0x2a/0x40 [ 31.114103] [ 31.116330] __local_bh_enable_ip+0x114/0x140 [ 31.120818] local_bh_enable+0x36/0x40 [ 31.124690] ip6_finish_output2+0x1b6c/0x1f20 [ 31.129173] ip6_finish_output+0xb3f/0xc00 [ 31.133397] ip6_output+0x597/0x6c0 [ 31.137012] ? ip6_output+0x6c0/0x6c0 [ 31.140806] ? ac6_seq_show+0x200/0x200 [ 31.144772] ip6_local_out+0x573/0x640 [ 31.148643] ? __ip6_local_out+0x4f0/0x4f0 [ 31.152862] ip6_send_skb+0xfa/0x380 [ 31.156562] udp_v6_send_skb+0x116a/0x1880 [ 31.160791] udpv6_sendmsg+0x15f4/0x45b0 [ 31.164838] ? rw_copy_check_uvector+0x5af/0x6c0 [ 31.169588] ? rw_copy_check_uvector+0x643/0x6c0 [ 31.174328] ? ip_copy_metadata+0xac0/0xac0 [ 31.178641] ? udpv6_queue_rcv_skb+0x1c60/0x1c60 [ 31.183381] inet_sendmsg+0x48d/0x740 [ 31.187180] ? security_socket_sendmsg+0x9e/0x210 [ 31.192013] ? inet_getname+0x500/0x500 [ 31.195987] ___sys_sendmsg+0xec0/0x1310 [ 31.200053] ? __fdget+0x4e/0x60 [ 31.203402] ? __fget_light+0x56/0x710 [ 31.207277] ? __fdget+0x4e/0x60 [ 31.210718] ? __fget_light+0x1dc/0x710 [ 31.214690] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 31.220050] ? __fget_light+0x1f5/0x710 [ 31.224042] SYSC_sendmsg+0x2a3/0x3d0 [ 31.227846] SyS_sendmsg+0x54/0x80 [ 31.231378] do_syscall_64+0x309/0x430 [ 31.235262] ? ___sys_sendmsg+0x1310/0x1310 [ 31.239569] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 31.244751] RIP: 0033:0x4400d9 [ 31.247919] RSP: 002b:00007ffd552e8c98 EFLAGS: 00000217 ORIG_RAX: 000000000000002e [ 31.255608] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004400d9 [ 31.262861] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000003 [ 31.270115] RBP: 00000000006ca018 R08: 0000000000000000 R09: 0000000000000000 [ 31.277368] R10: 0000000000000000 R11: 0000000000000217 R12: 0000000000401a00 [ 31.284624] R13: 0000000000401a90 R14: 0000000000000000 R15: 0000000000000000 [ 31.292424] Dumping ftrace buffer: [ 31.295957] (ftrace buffer empty) [ 31.299659] Kernel Offset: disabled [ 31.303275] Rebooting in 86400 seconds..