INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.8' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 40.100499] ================================================================== [ 40.107885] BUG: KMSAN: uninit-value in csum_partial+0x78e/0x850 [ 40.114007] CPU: 0 PID: 3575 Comm: syzkaller178574 Not tainted 4.16.0+ #83 [ 40.120992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 40.130316] Call Trace: [ 40.132872] [ 40.135001] dump_stack+0x185/0x1d0 [ 40.138603] ? csum_partial+0x78e/0x850 [ 40.142551] kmsan_report+0x142/0x240 [ 40.146327] __msan_warning_32+0x6c/0xb0 [ 40.150365] csum_partial+0x78e/0x850 [ 40.154144] csum_partial_ext+0x89/0xa0 [ 40.158095] __skb_checksum+0x6d4/0x1010 [ 40.162131] ? skb_checksum+0x120/0x120 [ 40.166079] skb_checksum+0xec/0x120 [ 40.169769] ? skb_checksum+0x120/0x120 [ 40.173716] ? csum_partial_ext+0xa0/0xa0 [ 40.177841] __skb_checksum_complete+0x90/0x400 [ 40.182487] udp6_csum_init+0x94f/0x10c0 [ 40.186533] __udp6_lib_rcv+0x534/0x3920 [ 40.190573] ? ip6_input_finish+0x55c/0x2110 [ 40.195078] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 40.200424] udpv6_rcv+0x5c/0x70 [ 40.203768] ? udp_v6_early_demux+0x11a0/0x11a0 [ 40.208415] ip6_input_finish+0xa62/0x2110 [ 40.212630] ? ip6table_filter_hook+0xb5/0xe0 [ 40.217104] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 40.222448] ? ip6_input_finish+0x12a1/0x2110 [ 40.226926] ip6_input+0x294/0x320 [ 40.230452] ? ip6_input+0x320/0x320 [ 40.234148] ? ipv6_rcv+0x26d0/0x26d0 [ 40.237929] ipv6_rcv+0x20ec/0x26d0 [ 40.241534] ? local_bh_enable+0x40/0x40 [ 40.245588] __netif_receive_skb_core+0x47cf/0x4a80 [ 40.250583] ? kmsan_internal_memset_shadow_inline+0xd0/0xd0 [ 40.256356] ? ip6_rcv_finish+0x4d0/0x4d0 [ 40.260479] process_backlog+0x62d/0xe20 [ 40.264518] ? rps_trigger_softirq+0x2f0/0x2f0 [ 40.269073] net_rx_action+0x7c1/0x1a70 [ 40.273028] ? net_tx_action+0xab0/0xab0 [ 40.277064] __do_softirq+0x56d/0x93d [ 40.280841] do_softirq_own_stack+0x2a/0x40 [ 40.285131] [ 40.287344] __local_bh_enable_ip+0x114/0x140 [ 40.291814] local_bh_enable+0x36/0x40 [ 40.295678] ip6_finish_output2+0x1b6c/0x1f20 [ 40.300155] ip6_finish_output+0xb3f/0xc00 [ 40.304366] ip6_output+0x597/0x6c0 [ 40.307969] ? ip6_output+0x6c0/0x6c0 [ 40.311745] ? ac6_seq_show+0x200/0x200 [ 40.315702] ip6_local_out+0x573/0x640 [ 40.319571] ? __ip6_local_out+0x4f0/0x4f0 [ 40.323785] ip6_send_skb+0xfa/0x380 [ 40.327477] udp_v6_send_skb+0x116a/0x1880 [ 40.331724] udpv6_sendmsg+0x15f4/0x45b0 [ 40.335765] ? rw_copy_check_uvector+0x5af/0x6c0 [ 40.340499] ? rw_copy_check_uvector+0x643/0x6c0 [ 40.345240] ? ip_copy_metadata+0xac0/0xac0 [ 40.349557] ? udpv6_queue_rcv_skb+0x1c60/0x1c60 [ 40.354290] inet_sendmsg+0x48d/0x740 [ 40.358070] ? security_socket_sendmsg+0x9e/0x210 [ 40.362894] ? inet_getname+0x500/0x500 [ 40.366850] ___sys_sendmsg+0xec0/0x1310 [ 40.370901] ? __fdget+0x4e/0x60 [ 40.374244] ? __fget_light+0x56/0x710 [ 40.378107] ? __fdget+0x4e/0x60 [ 40.381451] ? __fget_light+0x1dc/0x710 [ 40.385407] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 40.390748] ? __fget_light+0x1f5/0x710 [ 40.394704] SYSC_sendmsg+0x2a3/0x3d0 [ 40.398484] SyS_sendmsg+0x54/0x80 [ 40.402000] do_syscall_64+0x309/0x430 [ 40.405877] ? ___sys_sendmsg+0x1310/0x1310 [ 40.410181] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 40.415347] RIP: 0033:0x440279 [ 40.418513] RSP: 002b:00007ffd345b1728 EFLAGS: 00000217 ORIG_RAX: 000000000000002e [ 40.426197] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440279 [ 40.433442] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000003 [ 40.440687] RBP: 00000000006ca018 R08: 0000000000007b3f R09: 0000000000007b3f [ 40.447935] R10: 0000000000007b3f R11: 0000000000000217 R12: 0000000000401ba0 [ 40.455183] R13: 0000000000401c30 R14: 0000000000000000 R15: 0000000000000000 [ 40.462432] [ 40.464077] Uninit was created at: [ 40.467601] kmsan_alloc_meta_for_pages+0x161/0x3a0 [ 40.472590] kmsan_alloc_page+0x82/0xe0 [ 40.476542] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 40.481277] alloc_pages_current+0x6b5/0x970 [ 40.485665] skb_page_frag_refill+0x3ba/0x5e0 [ 40.490138] sk_page_frag_refill+0xa4/0x340 [ 40.494438] __ip6_append_data+0x1a20/0x4bb0 [ 40.498823] ip6_append_data+0x40e/0x6b0 [ 40.502881] udpv6_sendmsg+0xfd5/0x45b0 [ 40.506838] inet_sendmsg+0x48d/0x740 [ 40.510614] ___sys_sendmsg+0xec0/0x1310 [ 40.514654] SYSC_sendmsg+0x2a3/0x3d0 [ 40.518433] SyS_sendmsg+0x54/0x80 [ 40.521950] do_syscall_64+0x309/0x430 [ 40.525814] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 40.530972] ================================================================== [ 40.538302] Disabling lock debugging due to kernel taint [ 40.543721] Kernel panic - not syncing: panic_on_warn set ... [ 40.543721] [ 40.551059] CPU: 0 PID: 3575 Comm: syzkaller178574 Tainted: G B 4.16.0+ #83 [ 40.559342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 40.568672] Call Trace: [ 40.571242] [ 40.573372] dump_stack+0x185/0x1d0 [ 40.576974] panic+0x39d/0x940 [ 40.580155] ? csum_partial+0x78e/0x850 [ 40.584106] kmsan_report+0x238/0x240 [ 40.587888] __msan_warning_32+0x6c/0xb0 [ 40.591924] csum_partial+0x78e/0x850 [ 40.595701] csum_partial_ext+0x89/0xa0 [ 40.599653] __skb_checksum+0x6d4/0x1010 [ 40.603691] ? skb_checksum+0x120/0x120 [ 40.607644] skb_checksum+0xec/0x120 [ 40.611333] ? skb_checksum+0x120/0x120 [ 40.615280] ? csum_partial_ext+0xa0/0xa0 [ 40.619404] __skb_checksum_complete+0x90/0x400 [ 40.624050] udp6_csum_init+0x94f/0x10c0 [ 40.628096] __udp6_lib_rcv+0x534/0x3920 [ 40.632136] ? ip6_input_finish+0x55c/0x2110 [ 40.636534] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 40.641882] udpv6_rcv+0x5c/0x70 [ 40.645225] ? udp_v6_early_demux+0x11a0/0x11a0 [ 40.649867] ip6_input_finish+0xa62/0x2110 [ 40.654080] ? ip6table_filter_hook+0xb5/0xe0 [ 40.658549] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 40.663888] ? ip6_input_finish+0x12a1/0x2110 [ 40.668361] ip6_input+0x294/0x320 [ 40.671881] ? ip6_input+0x320/0x320 [ 40.675570] ? ipv6_rcv+0x26d0/0x26d0 [ 40.679344] ipv6_rcv+0x20ec/0x26d0 [ 40.682945] ? local_bh_enable+0x40/0x40 [ 40.686983] __netif_receive_skb_core+0x47cf/0x4a80 [ 40.691975] ? kmsan_internal_memset_shadow_inline+0xd0/0xd0 [ 40.697749] ? ip6_rcv_finish+0x4d0/0x4d0 [ 40.701873] process_backlog+0x62d/0xe20 [ 40.705912] ? rps_trigger_softirq+0x2f0/0x2f0 [ 40.710467] net_rx_action+0x7c1/0x1a70 [ 40.714419] ? net_tx_action+0xab0/0xab0 [ 40.718458] __do_softirq+0x56d/0x93d [ 40.722235] do_softirq_own_stack+0x2a/0x40 [ 40.726539] [ 40.728754] __local_bh_enable_ip+0x114/0x140 [ 40.733232] local_bh_enable+0x36/0x40 [ 40.737096] ip6_finish_output2+0x1b6c/0x1f20 [ 40.741572] ip6_finish_output+0xb3f/0xc00 [ 40.745782] ip6_output+0x597/0x6c0 [ 40.749383] ? ip6_output+0x6c0/0x6c0 [ 40.753159] ? ac6_seq_show+0x200/0x200 [ 40.757106] ip6_local_out+0x573/0x640 [ 40.760966] ? __ip6_local_out+0x4f0/0x4f0 [ 40.765178] ip6_send_skb+0xfa/0x380 [ 40.768872] udp_v6_send_skb+0x116a/0x1880 [ 40.773087] udpv6_sendmsg+0x15f4/0x45b0 [ 40.777126] ? rw_copy_check_uvector+0x5af/0x6c0 [ 40.781856] ? rw_copy_check_uvector+0x643/0x6c0 [ 40.786592] ? ip_copy_metadata+0xac0/0xac0 [ 40.790891] ? udpv6_queue_rcv_skb+0x1c60/0x1c60 [ 40.795621] inet_sendmsg+0x48d/0x740 [ 40.799395] ? security_socket_sendmsg+0x9e/0x210 [ 40.804212] ? inet_getname+0x500/0x500 [ 40.808164] ___sys_sendmsg+0xec0/0x1310 [ 40.812201] ? __fdget+0x4e/0x60 [ 40.815543] ? __fget_light+0x56/0x710 [ 40.819404] ? __fdget+0x4e/0x60 [ 40.822743] ? __fget_light+0x1dc/0x710 [ 40.826692] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 40.832030] ? __fget_light+0x1f5/0x710 [ 40.835980] SYSC_sendmsg+0x2a3/0x3d0 [ 40.839759] SyS_sendmsg+0x54/0x80 [ 40.843276] do_syscall_64+0x309/0x430 [ 40.847139] ? ___sys_sendmsg+0x1310/0x1310 [ 40.851437] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 40.856601] RIP: 0033:0x440279 [ 40.859764] RSP: 002b:00007ffd345b1728 EFLAGS: 00000217 ORIG_RAX: 000000000000002e [ 40.867444] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440279 [ 40.874689] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000003 [ 40.881939] RBP: 00000000006ca018 R08: 0000000000007b3f R09: 0000000000007b3f [ 40.889185] R10: 0000000000007b3f R11: 0000000000000217 R12: 0000000000401ba0 [ 40.896431] R13: 0000000000401c30 R14: 0000000000000000 R15: 0000000000000000 [ 40.904073] Dumping ftrace buffer: [ 40.907584] (ftrace buffer empty) [ 40.911266] Kernel Offset: disabled [ 40.914872] Rebooting in 86400 seconds..