[ OK ] Started OpenBSD Secure Shell server. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.64' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 113.808256][ T8443] ===================================================== [ 113.815216][ T8443] BUG: KMSAN: uninit-value in nfnetlink_rcv+0x2f5/0x3ad0 [ 113.822212][ T8443] CPU: 0 PID: 8443 Comm: syz-executor851 Not tainted 5.8.0-rc5-syzkaller #0 [ 113.830850][ T8443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 113.840884][ T8443] Call Trace: [ 113.844159][ T8443] dump_stack+0x1df/0x240 [ 113.848471][ T8443] kmsan_report+0xf7/0x1e0 [ 113.852880][ T8443] __msan_warning+0x58/0xa0 [ 113.857432][ T8443] nfnetlink_rcv+0x2f5/0x3ad0 [ 113.862086][ T8443] ? kmsan_internal_chain_origin+0xad/0x130 [ 113.867955][ T8443] ? kmsan_memcpy_memmove_metadata+0x272/0x2e0 [ 113.874087][ T8443] ? netlink_sendmsg+0xfaa/0x14d0 [ 113.879109][ T8443] ? kernel_sendmsg+0x433/0x440 [ 113.883937][ T8443] ? sock_no_sendpage+0x235/0x300 [ 113.888937][ T8443] ? pipe_to_sendpage+0x38c/0x4c0 [ 113.893973][ T8443] ? __splice_from_pipe+0x565/0xf00 [ 113.899144][ T8443] ? splice_direct_to_actor+0x6b2/0xf50 [ 113.904661][ T8443] ? kmsan_get_metadata+0x4f/0x180 [ 113.909747][ T8443] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 113.915527][ T8443] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 113.921567][ T8443] ? kmsan_get_metadata+0x11d/0x180 [ 113.926739][ T8443] ? kmsan_get_metadata+0x4f/0x180 [ 113.931828][ T8443] ? kmsan_internal_set_origin+0x75/0xb0 [ 113.937447][ T8443] ? __msan_poison_alloca+0xf0/0x120 [ 113.942709][ T8443] ? kmsan_get_metadata+0x11d/0x180 [ 113.947881][ T8443] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 113.953660][ T8443] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 113.959700][ T8443] ? netlink_deliver_tap+0xc7/0xe90 [ 113.964893][ T8443] ? __netlink_lookup+0x758/0x810 [ 113.969894][ T8443] ? kmsan_set_origin_checked+0x95/0xf0 [ 113.975443][ T8443] ? kmsan_get_metadata+0x11d/0x180 [ 113.980642][ T8443] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 113.986424][ T8443] netlink_unicast+0xf9e/0x1100 [ 113.991253][ T8443] ? nfnetlink_net_exit_batch+0x280/0x280 [ 113.996954][ T8443] netlink_sendmsg+0x1246/0x14d0 [ 114.001877][ T8443] ? netlink_getsockopt+0x1440/0x1440 [ 114.007230][ T8443] kernel_sendmsg+0x433/0x440 [ 114.011883][ T8443] sock_no_sendpage+0x235/0x300 [ 114.016731][ T8443] ? sock_no_mmap+0x30/0x30 [ 114.021213][ T8443] sock_sendpage+0x1e1/0x2c0 [ 114.025803][ T8443] pipe_to_sendpage+0x38c/0x4c0 [ 114.030628][ T8443] ? sock_fasync+0x250/0x250 [ 114.035198][ T8443] __splice_from_pipe+0x565/0xf00 [ 114.040197][ T8443] ? generic_splice_sendpage+0x2d0/0x2d0 [ 114.045813][ T8443] generic_splice_sendpage+0x1d5/0x2d0 [ 114.051249][ T8443] ? iter_file_splice_write+0x1800/0x1800 [ 114.056944][ T8443] direct_splice_actor+0x1fd/0x580 [ 114.062031][ T8443] ? kmsan_get_metadata+0x4f/0x180 [ 114.067120][ T8443] splice_direct_to_actor+0x6b2/0xf50 [ 114.072476][ T8443] ? do_splice_direct+0x580/0x580 [ 114.077487][ T8443] do_splice_direct+0x342/0x580 [ 114.082316][ T8443] do_sendfile+0x101b/0x1d40 [ 114.086892][ T8443] __se_sys_sendfile64+0x2bb/0x360 [ 114.091976][ T8443] ? kmsan_get_metadata+0x4f/0x180 [ 114.097080][ T8443] __x64_sys_sendfile64+0x56/0x70 [ 114.102082][ T8443] do_syscall_64+0xb0/0x150 [ 114.106564][ T8443] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 114.112437][ T8443] RIP: 0033:0x4402b9 [ 114.116309][ T8443] Code: Bad RIP value. [ 114.120346][ T8443] RSP: 002b:00007ffc276669c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 114.128728][ T8443] RAX: ffffffffffffffda RBX: 00007ffc276669d0 RCX: 00000000004402b9 [ 114.136680][ T8443] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 114.144626][ T8443] RBP: 00000000006ca018 R08: 65732f636f72702f R09: 65732f636f72702f [ 114.152570][ T8443] R10: 0000000080000002 R11: 0000000000000246 R12: 0000000000401b20 [ 114.160512][ T8443] R13: 0000000000401bb0 R14: 0000000000000000 R15: 0000000000000000 [ 114.168468][ T8443] [ 114.170783][ T8443] Uninit was stored to memory at: [ 114.175783][ T8443] kmsan_internal_chain_origin+0xad/0x130 [ 114.181473][ T8443] kmsan_memcpy_memmove_metadata+0x272/0x2e0 [ 114.187423][ T8443] kmsan_memcpy_metadata+0xb/0x10 [ 114.192426][ T8443] __msan_memcpy+0x43/0x50 [ 114.196827][ T8443] _copy_from_iter_full+0xbfe/0x13b0 [ 114.202087][ T8443] netlink_sendmsg+0xfaa/0x14d0 [ 114.206909][ T8443] kernel_sendmsg+0x433/0x440 [ 114.211569][ T8443] sock_no_sendpage+0x235/0x300 [ 114.216405][ T8443] sock_sendpage+0x1e1/0x2c0 [ 114.220976][ T8443] pipe_to_sendpage+0x38c/0x4c0 [ 114.225804][ T8443] __splice_from_pipe+0x565/0xf00 [ 114.230804][ T8443] generic_splice_sendpage+0x1d5/0x2d0 [ 114.236240][ T8443] direct_splice_actor+0x1fd/0x580 [ 114.241336][ T8443] splice_direct_to_actor+0x6b2/0xf50 [ 114.246689][ T8443] do_splice_direct+0x342/0x580 [ 114.251522][ T8443] do_sendfile+0x101b/0x1d40 [ 114.256090][ T8443] __se_sys_sendfile64+0x2bb/0x360 [ 114.261174][ T8443] __x64_sys_sendfile64+0x56/0x70 [ 114.266233][ T8443] do_syscall_64+0xb0/0x150 [ 114.270714][ T8443] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 114.276587][ T8443] [ 114.278886][ T8443] Uninit was created at: [ 114.283156][ T8443] kmsan_save_stack_with_flags+0x3c/0x90 [ 114.288762][ T8443] kmsan_alloc_page+0xb9/0x180 [ 114.293498][ T8443] __alloc_pages_nodemask+0x56a2/0x5dc0 [ 114.299015][ T8443] alloc_pages_current+0x672/0x990 [ 114.304105][ T8443] push_pipe+0x605/0xb70 [ 114.308321][ T8443] iov_iter_get_pages_alloc+0x18a9/0x21c0 [ 114.314063][ T8443] do_splice_to+0x4fc/0x14f0 [ 114.318667][ T8443] splice_direct_to_actor+0x45c/0xf50 [ 114.324018][ T8443] do_splice_direct+0x342/0x580 [ 114.328888][ T8443] do_sendfile+0x101b/0x1d40 [ 114.333451][ T8443] __se_sys_sendfile64+0x2bb/0x360 [ 114.338535][ T8443] __x64_sys_sendfile64+0x56/0x70 [ 114.343532][ T8443] do_syscall_64+0xb0/0x150 [ 114.348010][ T8443] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 114.353869][ T8443] ===================================================== [ 114.360769][ T8443] Disabling lock debugging due to kernel taint [ 114.366893][ T8443] Kernel panic - not syncing: panic_on_warn set ... [ 114.373455][ T8443] CPU: 0 PID: 8443 Comm: syz-executor851 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 114.383483][ T8443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 114.393510][ T8443] Call Trace: [ 114.396776][ T8443] dump_stack+0x1df/0x240 [ 114.401086][ T8443] panic+0x3d5/0xc3e [ 114.404967][ T8443] kmsan_report+0x1df/0x1e0 [ 114.409454][ T8443] __msan_warning+0x58/0xa0 [ 114.413935][ T8443] nfnetlink_rcv+0x2f5/0x3ad0 [ 114.418619][ T8443] ? kmsan_internal_chain_origin+0xad/0x130 [ 114.424493][ T8443] ? kmsan_memcpy_memmove_metadata+0x272/0x2e0 [ 114.430620][ T8443] ? netlink_sendmsg+0xfaa/0x14d0 [ 114.435647][ T8443] ? kernel_sendmsg+0x433/0x440 [ 114.440469][ T8443] ? sock_no_sendpage+0x235/0x300 [ 114.445470][ T8443] ? pipe_to_sendpage+0x38c/0x4c0 [ 114.450573][ T8443] ? __splice_from_pipe+0x565/0xf00 [ 114.455746][ T8443] ? splice_direct_to_actor+0x6b2/0xf50 [ 114.461263][ T8443] ? kmsan_get_metadata+0x4f/0x180 [ 114.466347][ T8443] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 114.472140][ T8443] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 114.478238][ T8443] ? kmsan_get_metadata+0x11d/0x180 [ 114.483408][ T8443] ? kmsan_get_metadata+0x4f/0x180 [ 114.488492][ T8443] ? kmsan_internal_set_origin+0x75/0xb0 [ 114.494101][ T8443] ? __msan_poison_alloca+0xf0/0x120 [ 114.499359][ T8443] ? kmsan_get_metadata+0x11d/0x180 [ 114.504530][ T8443] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 114.510308][ T8443] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 114.516352][ T8443] ? netlink_deliver_tap+0xc7/0xe90 [ 114.521521][ T8443] ? __netlink_lookup+0x758/0x810 [ 114.526533][ T8443] ? kmsan_set_origin_checked+0x95/0xf0 [ 114.532051][ T8443] ? kmsan_get_metadata+0x11d/0x180 [ 114.537224][ T8443] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 114.543005][ T8443] netlink_unicast+0xf9e/0x1100 [ 114.547832][ T8443] ? nfnetlink_net_exit_batch+0x280/0x280 [ 114.553528][ T8443] netlink_sendmsg+0x1246/0x14d0 [ 114.558447][ T8443] ? netlink_getsockopt+0x1440/0x1440 [ 114.563793][ T8443] kernel_sendmsg+0x433/0x440 [ 114.568447][ T8443] sock_no_sendpage+0x235/0x300 [ 114.573294][ T8443] ? sock_no_mmap+0x30/0x30 [ 114.577773][ T8443] sock_sendpage+0x1e1/0x2c0 [ 114.582353][ T8443] pipe_to_sendpage+0x38c/0x4c0 [ 114.587190][ T8443] ? sock_fasync+0x250/0x250 [ 114.591763][ T8443] __splice_from_pipe+0x565/0xf00 [ 114.596762][ T8443] ? generic_splice_sendpage+0x2d0/0x2d0 [ 114.602394][ T8443] generic_splice_sendpage+0x1d5/0x2d0 [ 114.607843][ T8443] ? iter_file_splice_write+0x1800/0x1800 [ 114.614490][ T8443] direct_splice_actor+0x1fd/0x580 [ 114.619578][ T8443] ? kmsan_get_metadata+0x4f/0x180 [ 114.624665][ T8443] splice_direct_to_actor+0x6b2/0xf50 [ 114.630008][ T8443] ? do_splice_direct+0x580/0x580 [ 114.635018][ T8443] do_splice_direct+0x342/0x580 [ 114.639850][ T8443] do_sendfile+0x101b/0x1d40 [ 114.644424][ T8443] __se_sys_sendfile64+0x2bb/0x360 [ 114.649520][ T8443] ? kmsan_get_metadata+0x4f/0x180 [ 114.654620][ T8443] __x64_sys_sendfile64+0x56/0x70 [ 114.659625][ T8443] do_syscall_64+0xb0/0x150 [ 114.664112][ T8443] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 114.669981][ T8443] RIP: 0033:0x4402b9 [ 114.673850][ T8443] Code: Bad RIP value. [ 114.677889][ T8443] RSP: 002b:00007ffc276669c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 114.686280][ T8443] RAX: ffffffffffffffda RBX: 00007ffc276669d0 RCX: 00000000004402b9 [ 114.694226][ T8443] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 114.702170][ T8443] RBP: 00000000006ca018 R08: 65732f636f72702f R09: 65732f636f72702f [ 114.710116][ T8443] R10: 0000000080000002 R11: 0000000000000246 R12: 0000000000401b20 [ 114.718066][ T8443] R13: 0000000000401bb0 R14: 0000000000000000 R15: 0000000000000000 [ 114.727366][ T8443] Kernel Offset: 0x26400000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 114.738971][ T8443] Rebooting in 86400 seconds..