INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.10' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 31.061258] ================================================================== [ 31.068638] BUG: KMSAN: uninit-value in csum_partial+0x78e/0x850 [ 31.074767] CPU: 1 PID: 3572 Comm: syzkaller987095 Not tainted 4.16.0+ #82 [ 31.081755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 31.091093] Call Trace: [ 31.093658] [ 31.095789] dump_stack+0x185/0x1d0 [ 31.099394] ? csum_partial+0x78e/0x850 [ 31.103344] kmsan_report+0x142/0x240 [ 31.107121] __msan_warning_32+0x6c/0xb0 [ 31.111159] csum_partial+0x78e/0x850 [ 31.114939] csum_partial_ext+0x89/0xa0 [ 31.118891] __skb_checksum+0x6d4/0x1010 [ 31.122935] ? skb_checksum+0x120/0x120 [ 31.126896] skb_checksum+0xec/0x120 [ 31.130621] ? skb_checksum+0x120/0x120 [ 31.134602] ? csum_partial_ext+0xa0/0xa0 [ 31.138749] __skb_checksum_complete+0x90/0x400 [ 31.143415] udp6_csum_init+0x94f/0x10c0 [ 31.147458] __udp6_lib_rcv+0x534/0x3920 [ 31.151495] ? ip6_input_finish+0x55c/0x2110 [ 31.155882] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 31.161226] udpv6_rcv+0x5c/0x70 [ 31.164569] ? udp_v6_early_demux+0x11a0/0x11a0 [ 31.169215] ip6_input_finish+0xa62/0x2110 [ 31.173443] ? ip6table_filter_hook+0xb5/0xe0 [ 31.177919] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 31.183282] ? ip6_input_finish+0x12a1/0x2110 [ 31.187757] ip6_input+0x294/0x320 [ 31.191274] ? ip6_input+0x320/0x320 [ 31.194963] ? ipv6_rcv+0x26d0/0x26d0 [ 31.198738] ipv6_rcv+0x20ec/0x26d0 [ 31.202349] ? local_bh_enable+0x40/0x40 [ 31.206388] __netif_receive_skb_core+0x47cf/0x4a80 [ 31.211387] ? kmsan_internal_memset_shadow_inline+0xd0/0xd0 [ 31.217168] ? ip6_rcv_finish+0x4d0/0x4d0 [ 31.221297] process_backlog+0x62d/0xe20 [ 31.225339] ? rps_trigger_softirq+0x2f0/0x2f0 [ 31.229895] net_rx_action+0x7c1/0x1a70 [ 31.233846] ? net_tx_action+0xab0/0xab0 [ 31.237885] __do_softirq+0x56d/0x93d [ 31.241663] do_softirq_own_stack+0x2a/0x40 [ 31.245956] [ 31.248170] __local_bh_enable_ip+0x114/0x140 [ 31.252640] local_bh_enable+0x36/0x40 [ 31.256507] ip6_finish_output2+0x1b6c/0x1f20 [ 31.260986] ip6_finish_output+0xb3f/0xc00 [ 31.265215] ip6_output+0x597/0x6c0 [ 31.268818] ? ip6_output+0x6c0/0x6c0 [ 31.272594] ? ac6_seq_show+0x200/0x200 [ 31.276554] ip6_local_out+0x573/0x640 [ 31.280417] ? __ip6_local_out+0x4f0/0x4f0 [ 31.284639] ip6_send_skb+0xfa/0x380 [ 31.288338] udp_v6_send_skb+0x116a/0x1880 [ 31.292553] udpv6_sendmsg+0x15f4/0x45b0 [ 31.296593] ? rw_copy_check_uvector+0x5af/0x6c0 [ 31.301327] ? rw_copy_check_uvector+0x643/0x6c0 [ 31.306067] ? ip_copy_metadata+0xac0/0xac0 [ 31.310373] ? udpv6_queue_rcv_skb+0x1c60/0x1c60 [ 31.315105] inet_sendmsg+0x48d/0x740 [ 31.318888] ? security_socket_sendmsg+0x9e/0x210 [ 31.323707] ? inet_getname+0x500/0x500 [ 31.327658] ___sys_sendmsg+0xec0/0x1310 [ 31.331699] ? __fdget+0x4e/0x60 [ 31.335052] ? __fget_light+0x56/0x710 [ 31.338921] ? __fdget+0x4e/0x60 [ 31.342261] ? __fget_light+0x1dc/0x710 [ 31.346213] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 31.351551] ? __fget_light+0x1f5/0x710 [ 31.355509] SYSC_sendmsg+0x2a3/0x3d0 [ 31.359288] SyS_sendmsg+0x54/0x80 [ 31.362802] do_syscall_64+0x309/0x430 [ 31.366667] ? ___sys_sendmsg+0x1310/0x1310 [ 31.370969] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 31.376132] RIP: 0033:0x43ffc9 [ 31.379295] RSP: 002b:00007ffc15b23828 EFLAGS: 00000217 ORIG_RAX: 000000000000002e [ 31.386977] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043ffc9 [ 31.394223] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 31.401467] RBP: 00000000006ca018 R08: 00000000004002c8 R09: 00000000004002c8 [ 31.408717] R10: 00000000004002c8 R11: 0000000000000217 R12: 00000000004018f0 [ 31.415960] R13: 0000000000401980 R14: 0000000000000000 R15: 0000000000000000 [ 31.423207] [ 31.424806] Uninit was created at: [ 31.428327] kmsan_alloc_meta_for_pages+0x161/0x3a0 [ 31.433317] kmsan_alloc_page+0x82/0xe0 [ 31.437266] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 31.442003] alloc_pages_current+0x6b5/0x970 [ 31.446394] skb_page_frag_refill+0x3ba/0x5e0 [ 31.450863] sk_page_frag_refill+0xa4/0x340 [ 31.455161] __ip6_append_data+0x1a20/0x4bb0 [ 31.459545] ip6_append_data+0x40e/0x6b0 [ 31.463581] udpv6_sendmsg+0xfd5/0x45b0 [ 31.467530] inet_sendmsg+0x48d/0x740 [ 31.471308] ___sys_sendmsg+0xec0/0x1310 [ 31.475348] SYSC_sendmsg+0x2a3/0x3d0 [ 31.479123] SyS_sendmsg+0x54/0x80 [ 31.482637] do_syscall_64+0x309/0x430 [ 31.486501] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 31.491659] ================================================================== [ 31.498987] Disabling lock debugging due to kernel taint [ 31.504410] Kernel panic - not syncing: panic_on_warn set ... [ 31.504410] [ 31.511749] CPU: 1 PID: 3572 Comm: syzkaller987095 Tainted: G B 4.16.0+ #82 [ 31.520040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 31.529374] Call Trace: [ 31.531936] [ 31.534070] dump_stack+0x185/0x1d0 [ 31.537672] panic+0x39d/0x940 [ 31.540856] ? csum_partial+0x78e/0x850 [ 31.544811] kmsan_report+0x238/0x240 [ 31.548589] __msan_warning_32+0x6c/0xb0 [ 31.552630] csum_partial+0x78e/0x850 [ 31.556426] csum_partial_ext+0x89/0xa0 [ 31.560385] __skb_checksum+0x6d4/0x1010 [ 31.564425] ? skb_checksum+0x120/0x120 [ 31.568376] skb_checksum+0xec/0x120 [ 31.572068] ? skb_checksum+0x120/0x120 [ 31.576033] ? csum_partial_ext+0xa0/0xa0 [ 31.580166] __skb_checksum_complete+0x90/0x400 [ 31.584814] udp6_csum_init+0x94f/0x10c0 [ 31.588855] __udp6_lib_rcv+0x534/0x3920 [ 31.592897] ? ip6_input_finish+0x55c/0x2110 [ 31.597285] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 31.602663] udpv6_rcv+0x5c/0x70 [ 31.606011] ? udp_v6_early_demux+0x11a0/0x11a0 [ 31.610666] ip6_input_finish+0xa62/0x2110 [ 31.614882] ? ip6table_filter_hook+0xb5/0xe0 [ 31.619355] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 31.624697] ? ip6_input_finish+0x12a1/0x2110 [ 31.629170] ip6_input+0x294/0x320 [ 31.632686] ? ip6_input+0x320/0x320 [ 31.637115] ? ipv6_rcv+0x26d0/0x26d0 [ 31.640892] ipv6_rcv+0x20ec/0x26d0 [ 31.644497] ? local_bh_enable+0x40/0x40 [ 31.648539] __netif_receive_skb_core+0x47cf/0x4a80 [ 31.653533] ? kmsan_internal_memset_shadow_inline+0xd0/0xd0 [ 31.659309] ? ip6_rcv_finish+0x4d0/0x4d0 [ 31.663433] process_backlog+0x62d/0xe20 [ 31.667475] ? rps_trigger_softirq+0x2f0/0x2f0 [ 31.672040] net_rx_action+0x7c1/0x1a70 [ 31.676005] ? net_tx_action+0xab0/0xab0 [ 31.680056] __do_softirq+0x56d/0x93d [ 31.683834] do_softirq_own_stack+0x2a/0x40 [ 31.688128] [ 31.690342] __local_bh_enable_ip+0x114/0x140 [ 31.694821] local_bh_enable+0x36/0x40 [ 31.698692] ip6_finish_output2+0x1b6c/0x1f20 [ 31.703169] ip6_finish_output+0xb3f/0xc00 [ 31.707382] ip6_output+0x597/0x6c0 [ 31.710984] ? ip6_output+0x6c0/0x6c0 [ 31.714766] ? ac6_seq_show+0x200/0x200 [ 31.718719] ip6_local_out+0x573/0x640 [ 31.722584] ? __ip6_local_out+0x4f0/0x4f0 [ 31.726800] ip6_send_skb+0xfa/0x380 [ 31.730494] udp_v6_send_skb+0x116a/0x1880 [ 31.734710] udpv6_sendmsg+0x15f4/0x45b0 [ 31.738752] ? rw_copy_check_uvector+0x5af/0x6c0 [ 31.743487] ? rw_copy_check_uvector+0x643/0x6c0 [ 31.748229] ? ip_copy_metadata+0xac0/0xac0 [ 31.752534] ? udpv6_queue_rcv_skb+0x1c60/0x1c60 [ 31.757267] inet_sendmsg+0x48d/0x740 [ 31.761055] ? security_socket_sendmsg+0x9e/0x210 [ 31.765880] ? inet_getname+0x500/0x500 [ 31.769829] ___sys_sendmsg+0xec0/0x1310 [ 31.773870] ? __fdget+0x4e/0x60 [ 31.777210] ? __fget_light+0x56/0x710 [ 31.781071] ? __fdget+0x4e/0x60 [ 31.784418] ? __fget_light+0x1dc/0x710 [ 31.788368] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 31.793707] ? __fget_light+0x1f5/0x710 [ 31.797679] SYSC_sendmsg+0x2a3/0x3d0 [ 31.801467] SyS_sendmsg+0x54/0x80 [ 31.804982] do_syscall_64+0x309/0x430 [ 31.808849] ? ___sys_sendmsg+0x1310/0x1310 [ 31.813150] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 31.818331] RIP: 0033:0x43ffc9 [ 31.821495] RSP: 002b:00007ffc15b23828 EFLAGS: 00000217 ORIG_RAX: 000000000000002e [ 31.829273] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043ffc9 [ 31.836520] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 31.843766] RBP: 00000000006ca018 R08: 00000000004002c8 R09: 00000000004002c8 [ 31.851023] R10: 00000000004002c8 R11: 0000000000000217 R12: 00000000004018f0 [ 31.858276] R13: 0000000000401980 R14: 0000000000000000 R15: 0000000000000000 [ 31.865941] Dumping ftrace buffer: [ 31.869456] (ftrace buffer empty) [ 31.873144] Kernel Offset: disabled [ 31.876746] Rebooting in 86400 seconds..