INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.4' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 31.836431] ================================================================== [ 31.843839] BUG: KMSAN: uninit-value in csum_partial+0x78e/0x850 [ 31.849975] CPU: 1 PID: 3564 Comm: syzkaller162450 Not tainted 4.16.0+ #84 [ 31.856974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 31.866324] Call Trace: [ 31.868904] [ 31.871057] dump_stack+0x185/0x1d0 [ 31.874674] ? csum_partial+0x78e/0x850 [ 31.878638] kmsan_report+0x142/0x240 [ 31.882436] __msan_warning_32+0x6c/0xb0 [ 31.886492] csum_partial+0x78e/0x850 [ 31.890284] csum_partial_ext+0x89/0xa0 [ 31.894248] __skb_checksum+0x6d4/0x1010 [ 31.898304] ? skb_checksum+0x120/0x120 [ 31.902276] skb_checksum+0xec/0x120 [ 31.905991] ? skb_checksum+0x120/0x120 [ 31.909966] ? csum_partial_ext+0xa0/0xa0 [ 31.914204] __skb_checksum_complete+0x90/0x400 [ 31.918866] udp6_csum_init+0x94f/0x10c0 [ 31.922932] __udp6_lib_rcv+0x534/0x3920 [ 31.926982] ? ip6_input_finish+0x55c/0x2110 [ 31.931380] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 31.936734] udpv6_rcv+0x5c/0x70 [ 31.940092] ? udp_v6_early_demux+0x11a0/0x11a0 [ 31.944749] ip6_input_finish+0xa62/0x2110 [ 31.948974] ? ip6table_filter_hook+0xb5/0xe0 [ 31.953458] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 31.958813] ? ip6_input_finish+0x12a1/0x2110 [ 31.963306] ip6_input+0x294/0x320 [ 31.966850] ? ip6_input+0x320/0x320 [ 31.970554] ? ipv6_rcv+0x26d0/0x26d0 [ 31.974345] ipv6_rcv+0x20ec/0x26d0 [ 31.977973] ? local_bh_enable+0x40/0x40 [ 31.982040] __netif_receive_skb_core+0x47cf/0x4a80 [ 31.987065] ? kmsan_internal_memset_shadow_inline+0xc0/0xd0 [ 31.992868] ? ip6_rcv_finish+0x4d0/0x4d0 [ 31.997015] process_backlog+0x62d/0xe20 [ 32.001081] ? rps_trigger_softirq+0x2f0/0x2f0 [ 32.005665] net_rx_action+0x7c1/0x1a70 [ 32.009636] ? net_tx_action+0xab0/0xab0 [ 32.013707] __do_softirq+0x56d/0x93d [ 32.017501] do_softirq_own_stack+0x2a/0x40 [ 32.021830] [ 32.024069] __local_bh_enable_ip+0x114/0x140 [ 32.028552] local_bh_enable+0x36/0x40 [ 32.032427] ip6_finish_output2+0x1b6c/0x1f20 [ 32.036917] ip6_finish_output+0xb3f/0xc00 [ 32.041150] ip6_output+0x597/0x6c0 [ 32.044766] ? ip6_output+0x6c0/0x6c0 [ 32.048553] ? ac6_seq_show+0x200/0x200 [ 32.052521] ip6_local_out+0x573/0x640 [ 32.056397] ? __ip6_local_out+0x4f0/0x4f0 [ 32.060625] ip6_send_skb+0xfa/0x380 [ 32.064336] udp_v6_send_skb+0x116a/0x1880 [ 32.068560] udpv6_sendmsg+0x15f4/0x45b0 [ 32.072620] ? rw_copy_check_uvector+0x5af/0x6c0 [ 32.077368] ? rw_copy_check_uvector+0x643/0x6c0 [ 32.082125] ? ip_copy_metadata+0xac0/0xac0 [ 32.086456] ? udpv6_queue_rcv_skb+0x1c60/0x1c60 [ 32.091214] inet_sendmsg+0x48d/0x740 [ 32.095016] ? security_socket_sendmsg+0x9e/0x210 [ 32.099857] ? inet_getname+0x500/0x500 [ 32.103818] ___sys_sendmsg+0xec0/0x1310 [ 32.107875] ? __fdget+0x4e/0x60 [ 32.111226] ? __fget_light+0x56/0x710 [ 32.115098] ? __fdget+0x4e/0x60 [ 32.118456] ? __fget_light+0x1dc/0x710 [ 32.122416] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 32.127763] ? __fget_light+0x1f5/0x710 [ 32.131729] SYSC_sendmsg+0x2a3/0x3d0 [ 32.135521] SyS_sendmsg+0x54/0x80 [ 32.139057] do_syscall_64+0x309/0x430 [ 32.142932] ? ___sys_sendmsg+0x1310/0x1310 [ 32.147240] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 32.152423] RIP: 0033:0x440109 [ 32.155597] RSP: 002b:00007ffee3c2fba8 EFLAGS: 00000217 ORIG_RAX: 000000000000002e [ 32.163291] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440109 [ 32.170546] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 32.177803] RBP: 00000000006ca018 R08: 0000000000000000 R09: 0000000000000000 [ 32.185066] R10: 0000000000000000 R11: 0000000000000217 R12: 0000000000401a30 [ 32.192334] R13: 0000000000401ac0 R14: 0000000000000000 R15: 0000000000000000 [ 32.199593] [ 32.201202] Uninit was created at: [ 32.204736] kmsan_alloc_meta_for_pages+0x161/0x3a0 [ 32.209739] kmsan_alloc_page+0x82/0xe0 [ 32.213698] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 32.218447] alloc_pages_current+0x6b5/0x970 [ 32.222842] skb_page_frag_refill+0x3ba/0x5e0 [ 32.227321] sk_page_frag_refill+0xa4/0x340 [ 32.231636] __ip6_append_data+0x1a20/0x4bb0 [ 32.236038] ip6_append_data+0x40e/0x6b0 [ 32.240099] udpv6_sendmsg+0xfd5/0x45b0 [ 32.244057] inet_sendmsg+0x48d/0x740 [ 32.247841] ___sys_sendmsg+0xec0/0x1310 [ 32.251890] SYSC_sendmsg+0x2a3/0x3d0 [ 32.255674] SyS_sendmsg+0x54/0x80 [ 32.259195] do_syscall_64+0x309/0x430 [ 32.263067] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 32.268249] ================================================================== [ 32.275591] Disabling lock debugging due to kernel taint [ 32.281029] Kernel panic - not syncing: panic_on_warn set ... [ 32.281029] [ 32.288389] CPU: 1 PID: 3564 Comm: syzkaller162450 Tainted: G B 4.16.0+ #84 [ 32.296690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 32.306041] Call Trace: [ 32.308629] [ 32.310771] dump_stack+0x185/0x1d0 [ 32.314385] panic+0x39d/0x940 [ 32.317577] ? csum_partial+0x78e/0x850 [ 32.321554] kmsan_report+0x238/0x240 [ 32.325363] __msan_warning_32+0x6c/0xb0 [ 32.329412] csum_partial+0x78e/0x850 [ 32.333219] csum_partial_ext+0x89/0xa0 [ 32.337182] __skb_checksum+0x6d4/0x1010 [ 32.341234] ? skb_checksum+0x120/0x120 [ 32.345197] skb_checksum+0xec/0x120 [ 32.348899] ? skb_checksum+0x120/0x120 [ 32.352871] ? csum_partial_ext+0xa0/0xa0 [ 32.357019] __skb_checksum_complete+0x90/0x400 [ 32.361690] udp6_csum_init+0x94f/0x10c0 [ 32.365745] __udp6_lib_rcv+0x534/0x3920 [ 32.369793] ? ip6_input_finish+0x55c/0x2110 [ 32.374188] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 32.379545] udpv6_rcv+0x5c/0x70 [ 32.382898] ? udp_v6_early_demux+0x11a0/0x11a0 [ 32.387562] ip6_input_finish+0xa62/0x2110 [ 32.391785] ? ip6table_filter_hook+0xb5/0xe0 [ 32.396272] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 32.401627] ? ip6_input_finish+0x12a1/0x2110 [ 32.406123] ip6_input+0x294/0x320 [ 32.409656] ? ip6_input+0x320/0x320 [ 32.413363] ? ipv6_rcv+0x26d0/0x26d0 [ 32.417162] ipv6_rcv+0x20ec/0x26d0 [ 32.420779] ? local_bh_enable+0x40/0x40 [ 32.424850] __netif_receive_skb_core+0x47cf/0x4a80 [ 32.429898] ? kmsan_internal_memset_shadow_inline+0xc0/0xd0 [ 32.435693] ? ip6_rcv_finish+0x4d0/0x4d0 [ 32.439829] process_backlog+0x62d/0xe20 [ 32.443879] ? rps_trigger_softirq+0x2f0/0x2f0 [ 32.448447] net_rx_action+0x7c1/0x1a70 [ 32.452412] ? net_tx_action+0xab0/0xab0 [ 32.456462] __do_softirq+0x56d/0x93d [ 32.460249] do_softirq_own_stack+0x2a/0x40 [ 32.464550] [ 32.466773] __local_bh_enable_ip+0x114/0x140 [ 32.471259] local_bh_enable+0x36/0x40 [ 32.475136] ip6_finish_output2+0x1b6c/0x1f20 [ 32.479632] ip6_finish_output+0xb3f/0xc00 [ 32.483858] ip6_output+0x597/0x6c0 [ 32.487476] ? ip6_output+0x6c0/0x6c0 [ 32.491266] ? ac6_seq_show+0x200/0x200 [ 32.495224] ip6_local_out+0x573/0x640 [ 32.499099] ? __ip6_local_out+0x4f0/0x4f0 [ 32.503322] ip6_send_skb+0xfa/0x380 [ 32.507854] udp_v6_send_skb+0x116a/0x1880 [ 32.512096] udpv6_sendmsg+0x15f4/0x45b0 [ 32.516151] ? rw_copy_check_uvector+0x5af/0x6c0 [ 32.520905] ? rw_copy_check_uvector+0x643/0x6c0 [ 32.525658] ? ip_copy_metadata+0xac0/0xac0 [ 32.529974] ? udpv6_queue_rcv_skb+0x1c60/0x1c60 [ 32.534723] inet_sendmsg+0x48d/0x740 [ 32.538512] ? security_socket_sendmsg+0x9e/0x210 [ 32.543343] ? inet_getname+0x500/0x500 [ 32.547304] ___sys_sendmsg+0xec0/0x1310 [ 32.551363] ? __fdget+0x4e/0x60 [ 32.554714] ? __fget_light+0x56/0x710 [ 32.558586] ? __fdget+0x4e/0x60 [ 32.561952] ? __fget_light+0x1dc/0x710 [ 32.565911] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 32.571257] ? __fget_light+0x1f5/0x710 [ 32.575228] SYSC_sendmsg+0x2a3/0x3d0 [ 32.579030] SyS_sendmsg+0x54/0x80 [ 32.582748] do_syscall_64+0x309/0x430 [ 32.586631] ? ___sys_sendmsg+0x1310/0x1310 [ 32.590939] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 32.596110] RIP: 0033:0x440109 [ 32.599280] RSP: 002b:00007ffee3c2fba8 EFLAGS: 00000217 ORIG_RAX: 000000000000002e [ 32.606975] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440109 [ 32.614232] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 32.621488] RBP: 00000000006ca018 R08: 0000000000000000 R09: 0000000000000000 [ 32.628747] R10: 0000000000000000 R11: 0000000000000217 R12: 0000000000401a30 [ 32.636009] R13: 0000000000401ac0 R14: 0000000000000000 R15: 0000000000000000 [ 32.643770] Dumping ftrace buffer: [ 32.647293] (ftrace buffer empty) [ 32.650983] Kernel Offset: disabled [ 32.654595] Rebooting in 86400 seconds..