INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.13' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 30.829354] ================================================================== [ 30.836736] BUG: KMSAN: uninit-value in csum_partial+0x78e/0x850 [ 30.842856] CPU: 0 PID: 3567 Comm: syzkaller273217 Not tainted 4.16.0+ #84 [ 30.849839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 30.859163] Call Trace: [ 30.861720] [ 30.863847] dump_stack+0x185/0x1d0 [ 30.867448] ? csum_partial+0x78e/0x850 [ 30.871398] kmsan_report+0x142/0x240 [ 30.875189] __msan_warning_32+0x6c/0xb0 [ 30.879226] csum_partial+0x78e/0x850 [ 30.883008] csum_partial_ext+0x89/0xa0 [ 30.886968] __skb_checksum+0x6d4/0x1010 [ 30.891027] ? skb_checksum+0x120/0x120 [ 30.894995] skb_checksum+0xec/0x120 [ 30.898688] ? skb_checksum+0x120/0x120 [ 30.902639] ? csum_partial_ext+0xa0/0xa0 [ 30.906763] __skb_checksum_complete+0x90/0x400 [ 30.911409] udp6_csum_init+0x94f/0x10c0 [ 30.915449] __udp6_lib_rcv+0x534/0x3920 [ 30.919486] ? ip6_input_finish+0x55c/0x2110 [ 30.923872] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 30.929215] udpv6_rcv+0x5c/0x70 [ 30.932556] ? udp_v6_early_demux+0x11a0/0x11a0 [ 30.937202] ip6_input_finish+0xa62/0x2110 [ 30.941414] ? ip6table_filter_hook+0xb5/0xe0 [ 30.945885] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 30.951224] ? ip6_input_finish+0x12a1/0x2110 [ 30.955695] ip6_input+0x294/0x320 [ 30.959209] ? ip6_input+0x320/0x320 [ 30.962897] ? ipv6_rcv+0x26d0/0x26d0 [ 30.966670] ipv6_rcv+0x20ec/0x26d0 [ 30.970272] ? local_bh_enable+0x40/0x40 [ 30.974314] __netif_receive_skb_core+0x47cf/0x4a80 [ 30.979308] ? kmsan_internal_memset_shadow_inline+0xc0/0xd0 [ 30.985098] ? ip6_rcv_finish+0x4d0/0x4d0 [ 30.989228] process_backlog+0x62d/0xe20 [ 30.993269] ? rps_trigger_softirq+0x2f0/0x2f0 [ 30.997824] net_rx_action+0x7c1/0x1a70 [ 31.001776] ? net_tx_action+0xab0/0xab0 [ 31.005814] __do_softirq+0x56d/0x93d [ 31.009593] do_softirq_own_stack+0x2a/0x40 [ 31.013885] [ 31.016111] __local_bh_enable_ip+0x114/0x140 [ 31.020586] local_bh_enable+0x36/0x40 [ 31.024448] ip6_finish_output2+0x1b6c/0x1f20 [ 31.028923] ip6_finish_output+0xb3f/0xc00 [ 31.033133] ip6_output+0x597/0x6c0 [ 31.036735] ? ip6_output+0x6c0/0x6c0 [ 31.040512] ? ac6_seq_show+0x200/0x200 [ 31.044463] ip6_local_out+0x573/0x640 [ 31.048325] ? __ip6_local_out+0x4f0/0x4f0 [ 31.052538] ip6_send_skb+0xfa/0x380 [ 31.056228] udp_v6_send_skb+0x116a/0x1880 [ 31.060441] udpv6_sendmsg+0x15f4/0x45b0 [ 31.064480] ? rw_copy_check_uvector+0x5af/0x6c0 [ 31.069210] ? rw_copy_check_uvector+0x643/0x6c0 [ 31.073944] ? ip_copy_metadata+0xac0/0xac0 [ 31.078243] ? udpv6_queue_rcv_skb+0x1c60/0x1c60 [ 31.082971] inet_sendmsg+0x48d/0x740 [ 31.086747] ? security_socket_sendmsg+0x9e/0x210 [ 31.091567] ? inet_getname+0x500/0x500 [ 31.095518] ___sys_sendmsg+0xec0/0x1310 [ 31.099559] ? __fdget+0x4e/0x60 [ 31.102901] ? __fget_light+0x56/0x710 [ 31.106761] ? __fdget+0x4e/0x60 [ 31.110101] ? __fget_light+0x1dc/0x710 [ 31.114057] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 31.119396] ? __fget_light+0x1f5/0x710 [ 31.123348] SYSC_sendmsg+0x2a3/0x3d0 [ 31.127128] SyS_sendmsg+0x54/0x80 [ 31.130642] do_syscall_64+0x309/0x430 [ 31.134505] ? ___sys_sendmsg+0x1310/0x1310 [ 31.138805] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 31.143967] RIP: 0033:0x43ff99 [ 31.147131] RSP: 002b:00007ffea58bb8b8 EFLAGS: 00000217 ORIG_RAX: 000000000000002e [ 31.154812] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043ff99 [ 31.162058] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000003 [ 31.169304] RBP: 00000000006ca018 R08: 00000000004002c8 R09: 00000000004002c8 [ 31.176548] R10: 00000000004002c8 R11: 0000000000000217 R12: 00000000004018c0 [ 31.183790] R13: 0000000000401950 R14: 0000000000000000 R15: 0000000000000000 [ 31.191046] [ 31.192649] Uninit was created at: [ 31.196165] kmsan_alloc_meta_for_pages+0x161/0x3a0 [ 31.201157] kmsan_alloc_page+0x82/0xe0 [ 31.205108] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 31.209838] alloc_pages_current+0x6b5/0x970 [ 31.214220] skb_page_frag_refill+0x3ba/0x5e0 [ 31.218686] sk_page_frag_refill+0xa4/0x340 [ 31.222980] __ip6_append_data+0x1a20/0x4bb0 [ 31.227362] ip6_append_data+0x40e/0x6b0 [ 31.231398] udpv6_sendmsg+0xfd5/0x45b0 [ 31.235347] inet_sendmsg+0x48d/0x740 [ 31.239122] ___sys_sendmsg+0xec0/0x1310 [ 31.243159] SYSC_sendmsg+0x2a3/0x3d0 [ 31.246934] SyS_sendmsg+0x54/0x80 [ 31.250447] do_syscall_64+0x309/0x430 [ 31.254310] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 31.259469] ================================================================== [ 31.266888] Disabling lock debugging due to kernel taint [ 31.272308] Kernel panic - not syncing: panic_on_warn set ... [ 31.272308] [ 31.279645] CPU: 0 PID: 3567 Comm: syzkaller273217 Tainted: G B 4.16.0+ #84 [ 31.287931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 31.297257] Call Trace: [ 31.299812] [ 31.301941] dump_stack+0x185/0x1d0 [ 31.305550] panic+0x39d/0x940 [ 31.308731] ? csum_partial+0x78e/0x850 [ 31.312941] kmsan_report+0x238/0x240 [ 31.316718] __msan_warning_32+0x6c/0xb0 [ 31.320756] csum_partial+0x78e/0x850 [ 31.324538] csum_partial_ext+0x89/0xa0 [ 31.328487] __skb_checksum+0x6d4/0x1010 [ 31.332529] ? skb_checksum+0x120/0x120 [ 31.336480] skb_checksum+0xec/0x120 [ 31.340169] ? skb_checksum+0x120/0x120 [ 31.344118] ? csum_partial_ext+0xa0/0xa0 [ 31.348242] __skb_checksum_complete+0x90/0x400 [ 31.352889] udp6_csum_init+0x94f/0x10c0 [ 31.356931] __udp6_lib_rcv+0x534/0x3920 [ 31.361168] ? ip6_input_finish+0x55c/0x2110 [ 31.365557] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 31.370903] udpv6_rcv+0x5c/0x70 [ 31.374246] ? udp_v6_early_demux+0x11a0/0x11a0 [ 31.378891] ip6_input_finish+0xa62/0x2110 [ 31.383104] ? ip6table_filter_hook+0xb5/0xe0 [ 31.387574] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 31.392914] ? ip6_input_finish+0x12a1/0x2110 [ 31.397385] ip6_input+0x294/0x320 [ 31.400900] ? ip6_input+0x320/0x320 [ 31.404590] ? ipv6_rcv+0x26d0/0x26d0 [ 31.408368] ipv6_rcv+0x20ec/0x26d0 [ 31.411973] ? local_bh_enable+0x40/0x40 [ 31.416027] __netif_receive_skb_core+0x47cf/0x4a80 [ 31.421036] ? kmsan_internal_memset_shadow_inline+0xc0/0xd0 [ 31.426820] ? ip6_rcv_finish+0x4d0/0x4d0 [ 31.430945] process_backlog+0x62d/0xe20 [ 31.434982] ? rps_trigger_softirq+0x2f0/0x2f0 [ 31.439541] net_rx_action+0x7c1/0x1a70 [ 31.443494] ? net_tx_action+0xab0/0xab0 [ 31.447548] __do_softirq+0x56d/0x93d [ 31.451333] do_softirq_own_stack+0x2a/0x40 [ 31.455624] [ 31.457840] __local_bh_enable_ip+0x114/0x140 [ 31.462310] local_bh_enable+0x36/0x40 [ 31.466178] ip6_finish_output2+0x1b6c/0x1f20 [ 31.470654] ip6_finish_output+0xb3f/0xc00 [ 31.474866] ip6_output+0x597/0x6c0 [ 31.478469] ? ip6_output+0x6c0/0x6c0 [ 31.482246] ? ac6_seq_show+0x200/0x200 [ 31.486195] ip6_local_out+0x573/0x640 [ 31.490067] ? __ip6_local_out+0x4f0/0x4f0 [ 31.494280] ip6_send_skb+0xfa/0x380 [ 31.497974] udp_v6_send_skb+0x116a/0x1880 [ 31.502188] udpv6_sendmsg+0x15f4/0x45b0 [ 31.506226] ? rw_copy_check_uvector+0x5af/0x6c0 [ 31.510957] ? rw_copy_check_uvector+0x643/0x6c0 [ 31.515689] ? ip_copy_metadata+0xac0/0xac0 [ 31.519992] ? udpv6_queue_rcv_skb+0x1c60/0x1c60 [ 31.524739] inet_sendmsg+0x48d/0x740 [ 31.528515] ? security_socket_sendmsg+0x9e/0x210 [ 31.533337] ? inet_getname+0x500/0x500 [ 31.537287] ___sys_sendmsg+0xec0/0x1310 [ 31.541326] ? __fdget+0x4e/0x60 [ 31.544667] ? __fget_light+0x56/0x710 [ 31.548531] ? __fdget+0x4e/0x60 [ 31.551870] ? __fget_light+0x1dc/0x710 [ 31.555822] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 31.561160] ? __fget_light+0x1f5/0x710 [ 31.565111] SYSC_sendmsg+0x2a3/0x3d0 [ 31.568889] SyS_sendmsg+0x54/0x80 [ 31.572404] do_syscall_64+0x309/0x430 [ 31.576267] ? ___sys_sendmsg+0x1310/0x1310 [ 31.580576] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 31.585737] RIP: 0033:0x43ff99 [ 31.588901] RSP: 002b:00007ffea58bb8b8 EFLAGS: 00000217 ORIG_RAX: 000000000000002e [ 31.596583] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043ff99 [ 31.603825] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000003 [ 31.611073] RBP: 00000000006ca018 R08: 00000000004002c8 R09: 00000000004002c8 [ 31.618317] R10: 00000000004002c8 R11: 0000000000000217 R12: 00000000004018c0 [ 31.625562] R13: 0000000000401950 R14: 0000000000000000 R15: 0000000000000000 [ 31.632857] Dumping ftrace buffer: [ 31.636381] (ftrace buffer empty) [ 31.640064] Kernel Offset: disabled [ 31.643663] Rebooting in 86400 seconds..