INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.41' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 31.024989] ================================================================== [ 31.032376] BUG: KMSAN: uninit-value in ip6table_mangle_hook+0x97e/0xb00 [ 31.039198] CPU: 1 PID: 3565 Comm: syzkaller679571 Not tainted 4.16.0+ #82 [ 31.046189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 31.055523] Call Trace: [ 31.058094] dump_stack+0x185/0x1d0 [ 31.061705] ? ip6table_mangle_hook+0x97e/0xb00 [ 31.066354] kmsan_report+0x142/0x240 [ 31.070135] __msan_warning_32+0x6c/0xb0 [ 31.074177] ip6table_mangle_hook+0x97e/0xb00 [ 31.078655] ? ip6table_mangle_net_exit+0x130/0x130 [ 31.083651] nf_hook_slow+0x158/0x3d0 [ 31.087435] ip6_xmit+0x1c3b/0x2120 [ 31.091049] ? ip6_xmit+0x2120/0x2120 [ 31.094839] ? ip6_rt_copy_init+0x8f0/0x8f0 [ 31.099145] inet6_csk_xmit+0x35b/0x440 [ 31.103118] ? inet6_csk_addr2sockaddr+0x2e0/0x2e0 [ 31.108038] dccp_transmit_skb+0x15eb/0x1900 [ 31.112432] dccp_xmit_packet+0x814/0x9e0 [ 31.116563] dccp_write_xmit+0x20f/0x480 [ 31.120611] dccp_sendmsg+0x12ca/0x12d0 [ 31.124570] ? compat_dccp_getsockopt+0x190/0x190 [ 31.129391] inet_sendmsg+0x48d/0x740 [ 31.133174] ? security_socket_sendmsg+0x9e/0x210 [ 31.137997] ? inet_getname+0x500/0x500 [ 31.141956] ___sys_sendmsg+0xec0/0x1310 [ 31.146001] ? __fdget+0x4e/0x60 [ 31.149346] ? __fget_light+0x56/0x710 [ 31.153211] ? __fdget+0x4e/0x60 [ 31.156556] ? __fget_light+0x1dc/0x710 [ 31.160510] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 31.165853] ? __fget_light+0x1f5/0x710 [ 31.169811] SYSC_sendmsg+0x2a3/0x3d0 [ 31.173599] SyS_sendmsg+0x54/0x80 [ 31.177120] do_syscall_64+0x309/0x430 [ 31.180988] ? ___sys_sendmsg+0x1310/0x1310 [ 31.185291] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 31.190457] RIP: 0033:0x440519 [ 31.193628] RSP: 002b:00007ffe9ced82c8 EFLAGS: 00000217 ORIG_RAX: 000000000000002e [ 31.201314] RAX: ffffffffffffffda RBX: 0100000000000000 RCX: 0000000000440519 [ 31.208562] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000005 [ 31.215809] RBP: 00000000006ca018 R08: 00000000004002c8 R09: 00000000004002c8 [ 31.223063] R10: 00000000004002c8 R11: 0000000000000217 R12: 0000000000401e40 [ 31.230321] R13: 0000000000401ed0 R14: 0000000000000000 R15: 0000000000000000 [ 31.237574] [ 31.239182] Uninit was stored to memory at: [ 31.243483] kmsan_internal_chain_origin+0x12b/0x210 [ 31.248562] __msan_chain_origin+0x69/0xc0 [ 31.252780] ip6_xmit+0x1899/0x2120 [ 31.256390] inet6_csk_xmit+0x35b/0x440 [ 31.260347] dccp_transmit_skb+0x15eb/0x1900 [ 31.264734] dccp_xmit_packet+0x814/0x9e0 [ 31.268862] dccp_write_xmit+0x20f/0x480 [ 31.272904] dccp_sendmsg+0x12ca/0x12d0 [ 31.276856] inet_sendmsg+0x48d/0x740 [ 31.280640] ___sys_sendmsg+0xec0/0x1310 [ 31.284680] SYSC_sendmsg+0x2a3/0x3d0 [ 31.288457] SyS_sendmsg+0x54/0x80 [ 31.291978] do_syscall_64+0x309/0x430 [ 31.295845] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 31.301008] Uninit was stored to memory at: [ 31.305311] kmsan_internal_chain_origin+0x12b/0x210 [ 31.310390] __msan_chain_origin+0x69/0xc0 [ 31.314604] inet_csk_clone_lock+0x503/0x580 [ 31.318990] dccp_create_openreq_child+0x7f/0x890 [ 31.323816] dccp_v6_request_recv_sock+0x88a/0x2000 [ 31.328814] dccp_check_req+0x7b9/0x8f0 [ 31.332766] dccp_v6_rcv+0x1109/0x2340 [ 31.336635] ip6_input_finish+0xa62/0x2110 [ 31.340847] ip6_input+0x294/0x320 [ 31.344368] ipv6_rcv+0x20ec/0x26d0 [ 31.347975] __netif_receive_skb_core+0x47cf/0x4a80 [ 31.352967] process_backlog+0x62d/0xe20 [ 31.357007] net_rx_action+0x7c1/0x1a70 [ 31.360958] __do_softirq+0x56d/0x93d [ 31.364732] Uninit was created at: [ 31.368268] kmsan_internal_poison_shadow+0xb8/0x1b0 [ 31.373350] kmsan_kmalloc+0x94/0x100 [ 31.377130] kmem_cache_alloc+0xaab/0xb90 [ 31.381265] inet_reqsk_alloc+0xc4/0x7f0 [ 31.385306] dccp_v6_conn_request+0x708/0x1880 [ 31.389871] dccp_rcv_state_process+0x2ea/0x2410 [ 31.394606] dccp_v6_do_rcv+0x55b/0x1220 [ 31.398644] __sk_receive_skb+0x60e/0xf20 [ 31.402773] dccp_v6_rcv+0x21d6/0x2340 [ 31.406645] ip6_input_finish+0xa62/0x2110 [ 31.410860] ip6_input+0x294/0x320 [ 31.414380] ipv6_rcv+0x20ec/0x26d0 [ 31.417987] __netif_receive_skb_core+0x47cf/0x4a80 [ 31.422980] process_backlog+0x62d/0xe20 [ 31.427028] net_rx_action+0x7c1/0x1a70 [ 31.430990] __do_softirq+0x56d/0x93d [ 31.434771] ================================================================== [ 31.442108] Disabling lock debugging due to kernel taint [ 31.447533] Kernel panic - not syncing: panic_on_warn set ... [ 31.447533] [ 31.454875] CPU: 1 PID: 3565 Comm: syzkaller679571 Tainted: G B 4.16.0+ #82 [ 31.463168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 31.472499] Call Trace: [ 31.475078] dump_stack+0x185/0x1d0 [ 31.478696] panic+0x39d/0x940 [ 31.481881] ? ip6table_mangle_hook+0x97e/0xb00 [ 31.486528] kmsan_report+0x238/0x240 [ 31.490307] __msan_warning_32+0x6c/0xb0 [ 31.494350] ip6table_mangle_hook+0x97e/0xb00 [ 31.498832] ? ip6table_mangle_net_exit+0x130/0x130 [ 31.503829] nf_hook_slow+0x158/0x3d0 [ 31.507612] ip6_xmit+0x1c3b/0x2120 [ 31.511222] ? ip6_xmit+0x2120/0x2120 [ 31.515000] ? ip6_rt_copy_init+0x8f0/0x8f0 [ 31.519314] inet6_csk_xmit+0x35b/0x440 [ 31.523272] ? inet6_csk_addr2sockaddr+0x2e0/0x2e0 [ 31.528184] dccp_transmit_skb+0x15eb/0x1900 [ 31.532576] dccp_xmit_packet+0x814/0x9e0 [ 31.536707] dccp_write_xmit+0x20f/0x480 [ 31.540749] dccp_sendmsg+0x12ca/0x12d0 [ 31.544705] ? compat_dccp_getsockopt+0x190/0x190 [ 31.549526] inet_sendmsg+0x48d/0x740 [ 31.553307] ? security_socket_sendmsg+0x9e/0x210 [ 31.558128] ? inet_getname+0x500/0x500 [ 31.562082] ___sys_sendmsg+0xec0/0x1310 [ 31.566124] ? __fdget+0x4e/0x60 [ 31.569471] ? __fget_light+0x56/0x710 [ 31.573337] ? __fdget+0x4e/0x60 [ 31.576682] ? __fget_light+0x1dc/0x710 [ 31.580636] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 31.585979] ? __fget_light+0x1f5/0x710 [ 31.589940] SYSC_sendmsg+0x2a3/0x3d0 [ 31.593726] SyS_sendmsg+0x54/0x80 [ 31.597244] do_syscall_64+0x309/0x430 [ 31.601113] ? ___sys_sendmsg+0x1310/0x1310 [ 31.605416] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 31.610584] RIP: 0033:0x440519 [ 31.613754] RSP: 002b:00007ffe9ced82c8 EFLAGS: 00000217 ORIG_RAX: 000000000000002e [ 31.621441] RAX: ffffffffffffffda RBX: 0100000000000000 RCX: 0000000000440519 [ 31.628691] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000005 [ 31.635939] RBP: 00000000006ca018 R08: 00000000004002c8 R09: 00000000004002c8 [ 31.643196] R10: 00000000004002c8 R11: 0000000000000217 R12: 0000000000401e40 [ 31.650456] R13: 0000000000401ed0 R14: 0000000000000000 R15: 0000000000000000 [ 31.658119] Dumping ftrace buffer: [ 31.661639] (ftrace buffer empty) [ 31.665331] Kernel Offset: disabled [ 31.668935] Rebooting in 86400 seconds..