INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.37' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 34.084330] ================================================================== [ 34.091727] BUG: KMSAN: uninit-value in csum_partial+0x78e/0x850 [ 34.097856] CPU: 0 PID: 3580 Comm: syzkaller662629 Not tainted 4.16.0+ #83 [ 34.104843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 34.114173] Call Trace: [ 34.116736] [ 34.118872] dump_stack+0x185/0x1d0 [ 34.122484] ? csum_partial+0x78e/0x850 [ 34.126441] kmsan_report+0x142/0x240 [ 34.130232] __msan_warning_32+0x6c/0xb0 [ 34.134278] csum_partial+0x78e/0x850 [ 34.138071] csum_partial_ext+0x89/0xa0 [ 34.142038] __skb_checksum+0x6d4/0x1010 [ 34.146093] ? skb_checksum+0x120/0x120 [ 34.150056] skb_checksum+0xec/0x120 [ 34.153757] ? skb_checksum+0x120/0x120 [ 34.157715] ? csum_partial_ext+0xa0/0xa0 [ 34.161852] __skb_checksum_complete+0x90/0x400 [ 34.166508] udp6_csum_init+0x94f/0x10c0 [ 34.170553] __udp6_lib_rcv+0x534/0x3920 [ 34.174594] ? ip6_input_finish+0x55c/0x2110 [ 34.178983] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 34.184338] udpv6_rcv+0x5c/0x70 [ 34.187688] ? udp_v6_early_demux+0x11a0/0x11a0 [ 34.192336] ip6_input_finish+0xa62/0x2110 [ 34.196560] ? ip6table_filter_hook+0xb5/0xe0 [ 34.201046] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 34.206405] ? ip6_input_finish+0x12a1/0x2110 [ 34.210881] ip6_input+0x294/0x320 [ 34.214399] ? ip6_input+0x320/0x320 [ 34.218097] ? ipv6_rcv+0x26d0/0x26d0 [ 34.221876] ipv6_rcv+0x20ec/0x26d0 [ 34.225493] ? local_bh_enable+0x40/0x40 [ 34.229539] __netif_receive_skb_core+0x47cf/0x4a80 [ 34.234538] ? kmsan_internal_memset_shadow_inline+0xd0/0xd0 [ 34.240319] ? ip6_rcv_finish+0x4d0/0x4d0 [ 34.244444] process_backlog+0x62d/0xe20 [ 34.248487] ? rps_trigger_softirq+0x2f0/0x2f0 [ 34.253056] net_rx_action+0x7c1/0x1a70 [ 34.257018] ? net_tx_action+0xab0/0xab0 [ 34.261073] __do_softirq+0x56d/0x93d [ 34.264858] do_softirq_own_stack+0x2a/0x40 [ 34.269164] [ 34.271382] __local_bh_enable_ip+0x114/0x140 [ 34.275855] local_bh_enable+0x36/0x40 [ 34.279721] ip6_finish_output2+0x1b6c/0x1f20 [ 34.284202] ip6_finish_output+0xb3f/0xc00 [ 34.288433] ip6_output+0x597/0x6c0 [ 34.292058] ? ip6_output+0x6c0/0x6c0 [ 34.295848] ? ac6_seq_show+0x200/0x200 [ 34.299809] ip6_local_out+0x573/0x640 [ 34.303675] ? __ip6_local_out+0x4f0/0x4f0 [ 34.307900] ip6_send_skb+0xfa/0x380 [ 34.311598] udp_v6_send_skb+0x116a/0x1880 [ 34.315817] udpv6_sendmsg+0x15f4/0x45b0 [ 34.319872] ? rw_copy_check_uvector+0x5af/0x6c0 [ 34.324624] ? rw_copy_check_uvector+0x643/0x6c0 [ 34.329363] ? ip_copy_metadata+0xac0/0xac0 [ 34.333667] ? udpv6_queue_rcv_skb+0x1c60/0x1c60 [ 34.338399] inet_sendmsg+0x48d/0x740 [ 34.342178] ? security_socket_sendmsg+0x9e/0x210 [ 34.347000] ? inet_getname+0x500/0x500 [ 34.350960] ___sys_sendmsg+0xec0/0x1310 [ 34.355019] ? __fdget+0x4e/0x60 [ 34.358373] ? __fget_light+0x56/0x710 [ 34.362239] ? __fdget+0x4e/0x60 [ 34.365589] ? __fget_light+0x1dc/0x710 [ 34.369546] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 34.374890] ? __fget_light+0x1f5/0x710 [ 34.378857] SYSC_sendmsg+0x2a3/0x3d0 [ 34.382640] SyS_sendmsg+0x54/0x80 [ 34.386166] do_syscall_64+0x309/0x430 [ 34.390043] ? ___sys_sendmsg+0x1310/0x1310 [ 34.394351] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 34.399531] RIP: 0033:0x4400d9 [ 34.402699] RSP: 002b:00007ffc93534e78 EFLAGS: 00000217 ORIG_RAX: 000000000000002e [ 34.410383] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004400d9 [ 34.417726] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000003 [ 34.424974] RBP: 00000000006ca018 R08: 0000000000000000 R09: 0000000000000000 [ 34.432228] R10: 0000000000000000 R11: 0000000000000217 R12: 0000000000401a00 [ 34.439479] R13: 0000000000401a90 R14: 0000000000000000 R15: 0000000000000000 [ 34.446729] [ 34.448331] Uninit was created at: [ 34.451852] kmsan_alloc_meta_for_pages+0x161/0x3a0 [ 34.456846] kmsan_alloc_page+0x82/0xe0 [ 34.460798] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 34.465541] alloc_pages_current+0x6b5/0x970 [ 34.469943] skb_page_frag_refill+0x3ba/0x5e0 [ 34.474417] sk_page_frag_refill+0xa4/0x340 [ 34.478721] __ip6_append_data+0x1a20/0x4bb0 [ 34.483117] ip6_append_data+0x40e/0x6b0 [ 34.487165] udpv6_sendmsg+0xfd5/0x45b0 [ 34.491119] inet_sendmsg+0x48d/0x740 [ 34.494898] ___sys_sendmsg+0xec0/0x1310 [ 34.498960] SYSC_sendmsg+0x2a3/0x3d0 [ 34.502744] SyS_sendmsg+0x54/0x80 [ 34.506266] do_syscall_64+0x309/0x430 [ 34.510134] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 34.515306] ================================================================== [ 34.522642] Disabling lock debugging due to kernel taint [ 34.528069] Kernel panic - not syncing: panic_on_warn set ... [ 34.528069] [ 34.535426] CPU: 0 PID: 3580 Comm: syzkaller662629 Tainted: G B 4.16.0+ #83 [ 34.543728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 34.553068] Call Trace: [ 34.555649] [ 34.557781] dump_stack+0x185/0x1d0 [ 34.561392] panic+0x39d/0x940 [ 34.564583] ? csum_partial+0x78e/0x850 [ 34.568541] kmsan_report+0x238/0x240 [ 34.572420] __msan_warning_32+0x6c/0xb0 [ 34.576483] csum_partial+0x78e/0x850 [ 34.580278] csum_partial_ext+0x89/0xa0 [ 34.584251] __skb_checksum+0x6d4/0x1010 [ 34.588306] ? skb_checksum+0x120/0x120 [ 34.592263] skb_checksum+0xec/0x120 [ 34.595956] ? skb_checksum+0x120/0x120 [ 34.599918] ? csum_partial_ext+0xa0/0xa0 [ 34.604059] __skb_checksum_complete+0x90/0x400 [ 34.608718] udp6_csum_init+0x94f/0x10c0 [ 34.612764] __udp6_lib_rcv+0x534/0x3920 [ 34.616807] ? ip6_input_finish+0x55c/0x2110 [ 34.621199] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 34.626553] udpv6_rcv+0x5c/0x70 [ 34.629899] ? udp_v6_early_demux+0x11a0/0x11a0 [ 34.634551] ip6_input_finish+0xa62/0x2110 [ 34.638777] ? ip6table_filter_hook+0xb5/0xe0 [ 34.643251] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 34.648610] ? ip6_input_finish+0x12a1/0x2110 [ 34.653102] ip6_input+0x294/0x320 [ 34.656627] ? ip6_input+0x320/0x320 [ 34.660322] ? ipv6_rcv+0x26d0/0x26d0 [ 34.664103] ipv6_rcv+0x20ec/0x26d0 [ 34.667722] ? local_bh_enable+0x40/0x40 [ 34.671776] __netif_receive_skb_core+0x47cf/0x4a80 [ 34.676786] ? kmsan_internal_memset_shadow_inline+0xd0/0xd0 [ 34.682568] ? ip6_rcv_finish+0x4d0/0x4d0 [ 34.686699] process_backlog+0x62d/0xe20 [ 34.690745] ? rps_trigger_softirq+0x2f0/0x2f0 [ 34.695316] net_rx_action+0x7c1/0x1a70 [ 34.699387] ? net_tx_action+0xab0/0xab0 [ 34.703431] __do_softirq+0x56d/0x93d [ 34.707231] do_softirq_own_stack+0x2a/0x40 [ 34.711529] [ 34.713748] __local_bh_enable_ip+0x114/0x140 [ 34.718253] local_bh_enable+0x36/0x40 [ 34.722129] ip6_finish_output2+0x1b6c/0x1f20 [ 34.726616] ip6_finish_output+0xb3f/0xc00 [ 34.730841] ip6_output+0x597/0x6c0 [ 34.734469] ? ip6_output+0x6c0/0x6c0 [ 34.738254] ? ac6_seq_show+0x200/0x200 [ 34.742255] ip6_local_out+0x573/0x640 [ 34.746124] ? __ip6_local_out+0x4f0/0x4f0 [ 34.750346] ip6_send_skb+0xfa/0x380 [ 34.754054] udp_v6_send_skb+0x116a/0x1880 [ 34.758294] udpv6_sendmsg+0x15f4/0x45b0 [ 34.762340] ? rw_copy_check_uvector+0x5af/0x6c0 [ 34.767084] ? rw_copy_check_uvector+0x643/0x6c0 [ 34.771824] ? ip_copy_metadata+0xac0/0xac0 [ 34.776137] ? udpv6_queue_rcv_skb+0x1c60/0x1c60 [ 34.780872] inet_sendmsg+0x48d/0x740 [ 34.784655] ? security_socket_sendmsg+0x9e/0x210 [ 34.789476] ? inet_getname+0x500/0x500 [ 34.793430] ___sys_sendmsg+0xec0/0x1310 [ 34.797473] ? __fdget+0x4e/0x60 [ 34.800818] ? __fget_light+0x56/0x710 [ 34.804692] ? __fdget+0x4e/0x60 [ 34.808044] ? __fget_light+0x1dc/0x710 [ 34.812017] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 34.817372] ? __fget_light+0x1f5/0x710 [ 34.821342] SYSC_sendmsg+0x2a3/0x3d0 [ 34.825128] SyS_sendmsg+0x54/0x80 [ 34.828648] do_syscall_64+0x309/0x430 [ 34.832517] ? ___sys_sendmsg+0x1310/0x1310 [ 34.836820] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 34.841987] RIP: 0033:0x4400d9 [ 34.845156] RSP: 002b:00007ffc93534e78 EFLAGS: 00000217 ORIG_RAX: 000000000000002e [ 34.852842] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004400d9 [ 34.860091] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000003 [ 34.867355] RBP: 00000000006ca018 R08: 0000000000000000 R09: 0000000000000000 [ 34.874604] R10: 0000000000000000 R11: 0000000000000217 R12: 0000000000401a00 [ 34.881854] R13: 0000000000401a90 R14: 0000000000000000 R15: 0000000000000000 [ 34.889658] Dumping ftrace buffer: [ 34.893184] (ftrace buffer empty) [ 34.896869] Kernel Offset: disabled [ 34.900473] Rebooting in 86400 seconds..