INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.11' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 29.831859] ================================================================== [ 29.839276] BUG: KMSAN: uninit-value in csum_partial+0x78e/0x850 [ 29.845405] CPU: 1 PID: 3580 Comm: syzkaller622463 Not tainted 4.16.0+ #84 [ 29.852459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 29.861798] Call Trace: [ 29.864364] [ 29.866501] dump_stack+0x185/0x1d0 [ 29.870124] ? csum_partial+0x78e/0x850 [ 29.874087] kmsan_report+0x142/0x240 [ 29.877873] __msan_warning_32+0x6c/0xb0 [ 29.881917] csum_partial+0x78e/0x850 [ 29.885715] csum_partial_ext+0x89/0xa0 [ 29.889672] __skb_checksum+0x6d4/0x1010 [ 29.893720] ? skb_checksum+0x120/0x120 [ 29.897678] skb_checksum+0xec/0x120 [ 29.901374] ? skb_checksum+0x120/0x120 [ 29.905329] ? csum_partial_ext+0xa0/0xa0 [ 29.909463] __skb_checksum_complete+0x90/0x400 [ 29.914119] udp6_csum_init+0x94f/0x10c0 [ 29.918169] __udp6_lib_rcv+0x534/0x3920 [ 29.922224] ? ip6_input_finish+0x55c/0x2110 [ 29.926618] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 29.931970] udpv6_rcv+0x5c/0x70 [ 29.935321] ? udp_v6_early_demux+0x11a0/0x11a0 [ 29.939972] ip6_input_finish+0xa62/0x2110 [ 29.944191] ? ip6table_filter_hook+0xb5/0xe0 [ 29.948668] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 29.954017] ? ip6_input_finish+0x12a1/0x2110 [ 29.958499] ip6_input+0x294/0x320 [ 29.962020] ? ip6_input+0x320/0x320 [ 29.965712] ? ipv6_rcv+0x26d0/0x26d0 [ 29.969496] ipv6_rcv+0x20ec/0x26d0 [ 29.973103] ? local_bh_enable+0x40/0x40 [ 29.977162] __netif_receive_skb_core+0x47cf/0x4a80 [ 29.982172] ? kmsan_internal_memset_shadow_inline+0xc0/0xd0 [ 29.987957] ? ip6_rcv_finish+0x4d0/0x4d0 [ 29.992096] process_backlog+0x62d/0xe20 [ 29.996149] ? rps_trigger_softirq+0x2f0/0x2f0 [ 30.000709] net_rx_action+0x7c1/0x1a70 [ 30.004842] ? net_tx_action+0xab0/0xab0 [ 30.008903] __do_softirq+0x56d/0x93d [ 30.012687] do_softirq_own_stack+0x2a/0x40 [ 30.016995] [ 30.019218] __local_bh_enable_ip+0x114/0x140 [ 30.023698] local_bh_enable+0x36/0x40 [ 30.028163] ip6_finish_output2+0x1b6c/0x1f20 [ 30.032653] ip6_finish_output+0xb3f/0xc00 [ 30.036875] ip6_output+0x597/0x6c0 [ 30.040486] ? ip6_output+0x6c0/0x6c0 [ 30.044270] ? ac6_seq_show+0x200/0x200 [ 30.048227] ip6_local_out+0x573/0x640 [ 30.052099] ? __ip6_local_out+0x4f0/0x4f0 [ 30.056330] ip6_send_skb+0xfa/0x380 [ 30.060028] udp_v6_send_skb+0x116a/0x1880 [ 30.064248] udpv6_sendmsg+0x15f4/0x45b0 [ 30.068297] ? rw_copy_check_uvector+0x5af/0x6c0 [ 30.073037] ? rw_copy_check_uvector+0x643/0x6c0 [ 30.077785] ? ip_copy_metadata+0xac0/0xac0 [ 30.082094] ? udpv6_queue_rcv_skb+0x1c60/0x1c60 [ 30.086834] inet_sendmsg+0x48d/0x740 [ 30.090624] ? security_socket_sendmsg+0x9e/0x210 [ 30.095453] ? inet_getname+0x500/0x500 [ 30.099420] ___sys_sendmsg+0xec0/0x1310 [ 30.103468] ? __fdget+0x4e/0x60 [ 30.106814] ? __fget_light+0x56/0x710 [ 30.110680] ? __fdget+0x4e/0x60 [ 30.114024] ? __fget_light+0x1dc/0x710 [ 30.117978] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 30.123322] ? __fget_light+0x1f5/0x710 [ 30.127285] SYSC_sendmsg+0x2a3/0x3d0 [ 30.131082] SyS_sendmsg+0x54/0x80 [ 30.134622] do_syscall_64+0x309/0x430 [ 30.138508] ? ___sys_sendmsg+0x1310/0x1310 [ 30.142814] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 30.147982] RIP: 0033:0x4401f9 [ 30.151154] RSP: 002b:00007ffdbe91fb48 EFLAGS: 00000217 ORIG_RAX: 000000000000002e [ 30.158844] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004401f9 [ 30.166095] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 30.173352] RBP: 00000000006ca018 R08: 0000000000000001 R09: 0000000000000001 [ 30.180605] R10: 0000000000000001 R11: 0000000000000217 R12: 0000000000401b20 [ 30.187856] R13: 0000000000401bb0 R14: 0000000000000000 R15: 0000000000000000 [ 30.195137] [ 30.196751] Uninit was created at: [ 30.200275] kmsan_alloc_meta_for_pages+0x161/0x3a0 [ 30.205274] kmsan_alloc_page+0x82/0xe0 [ 30.209232] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 30.213967] alloc_pages_current+0x6b5/0x970 [ 30.218356] skb_page_frag_refill+0x3ba/0x5e0 [ 30.222844] sk_page_frag_refill+0xa4/0x340 [ 30.227153] __ip6_append_data+0x1a20/0x4bb0 [ 30.231543] ip6_append_data+0x40e/0x6b0 [ 30.235586] udpv6_sendmsg+0xfd5/0x45b0 [ 30.239542] inet_sendmsg+0x48d/0x740 [ 30.243323] ___sys_sendmsg+0xec0/0x1310 [ 30.247382] SYSC_sendmsg+0x2a3/0x3d0 [ 30.251174] SyS_sendmsg+0x54/0x80 [ 30.254695] do_syscall_64+0x309/0x430 [ 30.258565] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 30.263729] ================================================================== [ 30.271069] Disabling lock debugging due to kernel taint [ 30.276506] Kernel panic - not syncing: panic_on_warn set ... [ 30.276506] [ 30.283851] CPU: 1 PID: 3580 Comm: syzkaller622463 Tainted: G B 4.16.0+ #84 [ 30.292143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 30.301487] Call Trace: [ 30.304049] [ 30.306183] dump_stack+0x185/0x1d0 [ 30.309793] panic+0x39d/0x940 [ 30.312975] ? csum_partial+0x78e/0x850 [ 30.316928] kmsan_report+0x238/0x240 [ 30.320713] __msan_warning_32+0x6c/0xb0 [ 30.324759] csum_partial+0x78e/0x850 [ 30.328546] csum_partial_ext+0x89/0xa0 [ 30.332507] __skb_checksum+0x6d4/0x1010 [ 30.336553] ? skb_checksum+0x120/0x120 [ 30.340528] skb_checksum+0xec/0x120 [ 30.344223] ? skb_checksum+0x120/0x120 [ 30.348189] ? csum_partial_ext+0xa0/0xa0 [ 30.352323] __skb_checksum_complete+0x90/0x400 [ 30.356979] udp6_csum_init+0x94f/0x10c0 [ 30.361027] __udp6_lib_rcv+0x534/0x3920 [ 30.365068] ? ip6_input_finish+0x55c/0x2110 [ 30.369461] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 30.374814] udpv6_rcv+0x5c/0x70 [ 30.378164] ? udp_v6_early_demux+0x11a0/0x11a0 [ 30.382819] ip6_input_finish+0xa62/0x2110 [ 30.387051] ? ip6table_filter_hook+0xb5/0xe0 [ 30.391540] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 30.396894] ? ip6_input_finish+0x12a1/0x2110 [ 30.401377] ip6_input+0x294/0x320 [ 30.404900] ? ip6_input+0x320/0x320 [ 30.408598] ? ipv6_rcv+0x26d0/0x26d0 [ 30.412384] ipv6_rcv+0x20ec/0x26d0 [ 30.416011] ? local_bh_enable+0x40/0x40 [ 30.420062] __netif_receive_skb_core+0x47cf/0x4a80 [ 30.425075] ? kmsan_internal_memset_shadow_inline+0xc0/0xd0 [ 30.430859] ? ip6_rcv_finish+0x4d0/0x4d0 [ 30.434993] process_backlog+0x62d/0xe20 [ 30.439054] ? rps_trigger_softirq+0x2f0/0x2f0 [ 30.443626] net_rx_action+0x7c1/0x1a70 [ 30.447586] ? net_tx_action+0xab0/0xab0 [ 30.451631] __do_softirq+0x56d/0x93d [ 30.455420] do_softirq_own_stack+0x2a/0x40 [ 30.459717] [ 30.461936] __local_bh_enable_ip+0x114/0x140 [ 30.466414] local_bh_enable+0x36/0x40 [ 30.470287] ip6_finish_output2+0x1b6c/0x1f20 [ 30.474771] ip6_finish_output+0xb3f/0xc00 [ 30.478992] ip6_output+0x597/0x6c0 [ 30.482619] ? ip6_output+0x6c0/0x6c0 [ 30.486406] ? ac6_seq_show+0x200/0x200 [ 30.490363] ip6_local_out+0x573/0x640 [ 30.494234] ? __ip6_local_out+0x4f0/0x4f0 [ 30.498453] ip6_send_skb+0xfa/0x380 [ 30.502152] udp_v6_send_skb+0x116a/0x1880 [ 30.506374] udpv6_sendmsg+0x15f4/0x45b0 [ 30.510425] ? rw_copy_check_uvector+0x5af/0x6c0 [ 30.515167] ? rw_copy_check_uvector+0x643/0x6c0 [ 30.519909] ? ip_copy_metadata+0xac0/0xac0 [ 30.524218] ? udpv6_queue_rcv_skb+0x1c60/0x1c60 [ 30.528955] inet_sendmsg+0x48d/0x740 [ 30.532737] ? security_socket_sendmsg+0x9e/0x210 [ 30.537579] ? inet_getname+0x500/0x500 [ 30.541536] ___sys_sendmsg+0xec0/0x1310 [ 30.545586] ? __fdget+0x4e/0x60 [ 30.548932] ? __fget_light+0x56/0x710 [ 30.552803] ? __fdget+0x4e/0x60 [ 30.556154] ? __fget_light+0x1dc/0x710 [ 30.560121] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 30.565470] ? __fget_light+0x1f5/0x710 [ 30.569435] SYSC_sendmsg+0x2a3/0x3d0 [ 30.573230] SyS_sendmsg+0x54/0x80 [ 30.576751] do_syscall_64+0x309/0x430 [ 30.580626] ? ___sys_sendmsg+0x1310/0x1310 [ 30.584943] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 30.590112] RIP: 0033:0x4401f9 [ 30.593285] RSP: 002b:00007ffdbe91fb48 EFLAGS: 00000217 ORIG_RAX: 000000000000002e [ 30.600975] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004401f9 [ 30.608228] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 30.615492] RBP: 00000000006ca018 R08: 0000000000000001 R09: 0000000000000001 [ 30.622756] R10: 0000000000000001 R11: 0000000000000217 R12: 0000000000401b20 [ 30.630007] R13: 0000000000401bb0 R14: 0000000000000000 R15: 0000000000000000 [ 30.637798] Dumping ftrace buffer: [ 30.641321] (ftrace buffer empty) [ 30.645008] Kernel Offset: disabled [ 30.648614] Rebooting in 86400 seconds..