./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3158464703 <...> Warning: Permanently added '10.128.0.196' (ECDSA) to the list of known hosts. execve("./syz-executor3158464703", ["./syz-executor3158464703"], 0x7ffd9e6de750 /* 10 vars */) = 0 brk(NULL) = 0x5555574fe000 brk(0x5555574fec40) = 0x5555574fec40 arch_prctl(ARCH_SET_FS, 0x5555574fe300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor3158464703", 4096) = 28 brk(0x55555751fc40) = 0x55555751fc40 brk(0x555557520000) = 0x555557520000 mprotect(0x7f8565e97000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 4994 attached [pid 4994] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4994] setpgid(0, 0) = 0 [pid 4994] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4994] write(3, "1000", 4) = 4 [pid 4994] close(3) = 0 [pid 4994] socket(AF_INET6, SOCK_RAW, IPPROTO_ICMPV6) = 3 [pid 4994] sendmsg(3, {msg_name={sa_family=AF_INET6, sin6_port=htons(0), sin6_flowinfo=htonl(0), inet_pton(AF_INET6, "::", &sin6_addr), sin6_scope_id=0}, msg_namelen=28, msg_iov=[{iov_base="\x86\x30\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=65496}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 4992] <... clone resumed>, child_tidptr=0x5555574fe5d0) = 4994 [ 139.580429][ T4994] ===================================================== [ 139.587724][ T4994] BUG: KMSAN: uninit-value in __ip6_make_skb+0x2f37/0x30f0 [ 139.595200][ T4994] __ip6_make_skb+0x2f37/0x30f0 [ 139.600218][ T4994] ip6_push_pending_frames+0x10e/0x550 [ 139.605928][ T4994] rawv6_push_pending_frames+0xb12/0xb90 [ 139.611807][ T4994] rawv6_sendmsg+0x297e/0x2e60 [ 139.616732][ T4994] inet_sendmsg+0x101/0x180 [ 139.621353][ T4994] ____sys_sendmsg+0xa8e/0xe70 [ 139.626463][ T4994] ___sys_sendmsg+0x2a1/0x3f0 [ 139.631401][ T4994] __x64_sys_sendmsg+0x367/0x540 [ 139.636554][ T4994] do_syscall_64+0x3d/0xb0 [ 139.641133][ T4994] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 139.647383][ T4994] [ 139.649782][ T4994] Uninit was created at: [ 139.654303][ T4994] __kmem_cache_alloc_node+0x71f/0xce0 [ 139.659939][ T4994] __kmalloc_node_track_caller+0x114/0x3b0 [ 139.666016][ T4994] __alloc_skb+0x3af/0x8f0 [ 139.670583][ T4994] __ip6_append_data+0x51c1/0x6bb0 [ 139.675901][ T4994] ip6_append_data+0x411/0x580 [ 139.680839][ T4994] rawv6_sendmsg+0x2882/0x2e60 [ 139.686022][ T4994] inet_sendmsg+0x101/0x180 [ 139.690658][ T4994] ____sys_sendmsg+0xa8e/0xe70 [ 139.695715][ T4994] ___sys_sendmsg+0x2a1/0x3f0 [ 139.700616][ T4994] __x64_sys_sendmsg+0x367/0x540 [ 139.705807][ T4994] do_syscall_64+0x3d/0xb0 [ 139.710360][ T4994] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 139.716463][ T4994] [ 139.718860][ T4994] CPU: 1 PID: 4994 Comm: syz-executor315 Not tainted 6.2.0-rc3-syzkaller-79343-ge919e2b1bc1c #0 [ 139.729840][ T4994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 139.740113][ T4994] ===================================================== [ 139.747277][ T4994] Disabling lock debugging due to kernel taint [ 139.753560][ T4994] Kernel panic - not syncing: kmsan.panic set ... [ 139.760136][ T4994] CPU: 1 PID: 4994 Comm: syz-executor315 Tainted: G B 6.2.0-rc3-syzkaller-79343-ge919e2b1bc1c #0 [ 139.772242][ T4994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 139.782429][ T4994] Call Trace: [ 139.785789][ T4994] [ 139.788799][ T4994] dump_stack_lvl+0x1c8/0x260 [ 139.793596][ T4994] dump_stack+0x1a/0x20 [ 139.797865][ T4994] panic+0x4d3/0xc70 [ 139.801953][ T4994] ? add_taint+0x104/0x1a0 [ 139.806560][ T4994] kmsan_report+0x2cc/0x2d0 [ 139.811218][ T4994] ? __msan_warning+0x92/0x110 [ 139.816090][ T4994] ? __ip6_make_skb+0x2f37/0x30f0 [ 139.821267][ T4994] ? ip6_push_pending_frames+0x10e/0x550 [ 139.827036][ T4994] ? rawv6_push_pending_frames+0xb12/0xb90 [ 139.832965][ T4994] ? rawv6_sendmsg+0x297e/0x2e60 [ 139.838023][ T4994] ? inet_sendmsg+0x101/0x180 [ 139.842832][ T4994] ? ____sys_sendmsg+0xa8e/0xe70 [ 139.847961][ T4994] ? ___sys_sendmsg+0x2a1/0x3f0 [ 139.852965][ T4994] ? __x64_sys_sendmsg+0x367/0x540 [ 139.858225][ T4994] ? do_syscall_64+0x3d/0xb0 [ 139.862967][ T4994] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 139.869151][ T4994] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 139.875081][ T4994] ? __siphash_unaligned+0x3d6/0x9d0 [ 139.880551][ T4994] ? kmsan_internal_memmove_metadata+0x96/0x350 [ 139.886999][ T4994] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 139.893521][ T4994] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 139.899736][ T4994] __msan_warning+0x92/0x110 [ 139.904477][ T4994] __ip6_make_skb+0x2f37/0x30f0 [ 139.909521][ T4994] ip6_push_pending_frames+0x10e/0x550 [ 139.915110][ T4994] rawv6_push_pending_frames+0xb12/0xb90 [ 139.920972][ T4994] rawv6_sendmsg+0x297e/0x2e60 [ 139.925904][ T4994] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 139.931904][ T4994] ? compat_rawv6_ioctl+0xb0/0xb0 [ 139.937098][ T4994] ? compat_rawv6_ioctl+0xb0/0xb0 [ 139.942245][ T4994] inet_sendmsg+0x101/0x180 [ 139.946880][ T4994] ? inet_send_prepare+0x5b0/0x5b0 [ 139.952101][ T4994] ____sys_sendmsg+0xa8e/0xe70 [ 139.957050][ T4994] ___sys_sendmsg+0x2a1/0x3f0 [ 139.961845][ T4994] ? __x64_sys_sendmsg+0xa5/0x540 [ 139.967043][ T4994] ? __stack_depot_save+0x21/0x4b0 [ 139.972287][ T4994] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 139.978275][ T4994] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 139.984257][ T4994] __x64_sys_sendmsg+0x367/0x540 [ 139.989375][ T4994] do_syscall_64+0x3d/0xb0 [ 139.993915][ T4994] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 140.000008][ T4994] RIP: 0033:0x7f8565e2ad99 [ 140.004541][ T4994] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 140.024321][ T4994] RSP: 002b:00007ffde7e2f4f8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.032900][ T4994] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8565e2ad99 [ 140.040995][ T4994] RDX: 0000000000000000 RSI: 0000000020000600 RDI: 0000000000000003 [ 140.049041][ T4994] RBP: 0000000000000000 R08: 00007ffde7e2f698 R09: 00007ffde7e2f698 [ 140.057092][ T4994] R10: 00007ffde7e2ef70 R11: 0000000000000246 R12: 00007f8565dee620 [ 140.065145][ T4994] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000 [ 140.073226][ T4994] [ 140.076482][ T4994] Kernel Offset: disabled [ 140.080890][ T4994] Rebooting in 86400 seconds..