Warning: Permanently added '10.128.0.180' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 115.502038][T11198] ===================================================== [ 115.509218][T11198] BUG: KMSAN: uninit-value in __iptunnel_pull_header+0x30c/0xbd0 [ 115.517296][T11198] CPU: 1 PID: 11198 Comm: syz-executor779 Not tainted 5.6.0-rc2-syzkaller #0 [ 115.526145][T11198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 115.536203][T11198] Call Trace: [ 115.539513][T11198] dump_stack+0x1c9/0x220 [ 115.543993][T11198] kmsan_report+0xf7/0x1e0 [ 115.548422][T11198] __msan_warning+0x58/0xa0 [ 115.552930][T11198] __iptunnel_pull_header+0x30c/0xbd0 [ 115.558320][T11198] gre_rcv+0x15e/0x19c0 [ 115.562479][T11198] ? __local_bh_enable_ip+0x97/0x1d0 [ 115.567780][T11198] ? ipv6_chk_mcast_addr+0x713/0x7d0 [ 115.573530][T11198] ? kmsan_get_metadata+0x11d/0x180 [ 115.578726][T11198] ip6_protocol_deliver_rcu+0x181b/0x22c0 [ 115.584442][T11198] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 115.590243][T11198] ? ipv6_confirm+0x257/0x650 [ 115.594936][T11198] ip6_mc_input+0xdf2/0x1460 [ 115.599536][T11198] ? ip6_input+0x340/0x340 [ 115.603943][T11198] ? ip6_input_finish+0xa0/0xa0 [ 115.609047][T11198] ipv6_rcv+0x683/0x710 [ 115.613225][T11198] ? local_bh_enable+0x40/0x40 [ 115.617989][T11198] netif_receive_skb+0x66b/0xf20 [ 115.622929][T11198] ? __msan_poison_alloca+0xf0/0x120 [ 115.628315][T11198] tun_get_user+0x6aef/0x6f60 [ 115.633193][T11198] ? kmsan_get_metadata+0x11d/0x180 [ 115.638387][T11198] tun_chr_write_iter+0x1f2/0x360 [ 115.643499][T11198] ? tun_chr_read_iter+0x460/0x460 [ 115.648609][T11198] __vfs_write+0xa5a/0xca0 [ 115.653062][T11198] vfs_write+0x44a/0x8f0 [ 115.657486][T11198] ksys_write+0x267/0x450 [ 115.662050][T11198] __se_sys_write+0x92/0xb0 [ 115.666575][T11198] __x64_sys_write+0x4a/0x70 [ 115.671167][T11198] do_syscall_64+0xb8/0x160 [ 115.675674][T11198] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 115.681745][T11198] RIP: 0033:0x440289 [ 115.685650][T11198] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 115.705441][T11198] RSP: 002b:00007ffde128f478 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 115.713995][T11198] RAX: ffffffffffffffda RBX: 0000000000003172 RCX: 0000000000440289 [ 115.722257][T11198] RDX: 0000000000000fca RSI: 0000000020002580 RDI: 0000000000000003 [ 115.730241][T11198] RBP: 656c6c616b7a7973 R08: 0000000000401b10 R09: 0000000000401b10 [ 115.738329][T11198] R10: 0000000000401b10 R11: 0000000000000246 R12: 0000000000401b10 [ 115.746297][T11198] R13: 0000000000401ba0 R14: 0000000000000000 R15: 0000000000000000 [ 115.754363][T11198] [ 115.756679][T11198] Uninit was created at: [ 115.760926][T11198] kmsan_internal_poison_shadow+0x66/0xd0 [ 115.767076][T11198] kmsan_slab_alloc+0x8a/0xe0 [ 115.771750][T11198] __kmalloc_node_track_caller+0xb40/0x1200 [ 115.777831][T11198] __alloc_skb+0x2fd/0xac0 [ 115.782262][T11198] alloc_skb_with_frags+0x18c/0xa70 [ 115.787457][T11198] sock_alloc_send_pskb+0xada/0xc60 [ 115.792649][T11198] tun_get_user+0x10ae/0x6f60 [ 115.797317][T11198] tun_chr_write_iter+0x1f2/0x360 [ 115.802341][T11198] __vfs_write+0xa5a/0xca0 [ 115.806752][T11198] vfs_write+0x44a/0x8f0 [ 115.810984][T11198] ksys_write+0x267/0x450 [ 115.815301][T11198] __se_sys_write+0x92/0xb0 [ 115.819795][T11198] __x64_sys_write+0x4a/0x70 [ 115.824634][T11198] do_syscall_64+0xb8/0x160 [ 115.829128][T11198] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 115.835800][T11198] ===================================================== [ 115.842734][T11198] Disabling lock debugging due to kernel taint [ 115.848873][T11198] Kernel panic - not syncing: panic_on_warn set ... [ 115.855453][T11198] CPU: 1 PID: 11198 Comm: syz-executor779 Tainted: G B 5.6.0-rc2-syzkaller #0 [ 115.865602][T11198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 115.875643][T11198] Call Trace: [ 115.878948][T11198] dump_stack+0x1c9/0x220 [ 115.883277][T11198] panic+0x3d5/0xc3e [ 115.887208][T11198] kmsan_report+0x1df/0x1e0 [ 115.891716][T11198] __msan_warning+0x58/0xa0 [ 115.896216][T11198] __iptunnel_pull_header+0x30c/0xbd0 [ 115.901593][T11198] gre_rcv+0x15e/0x19c0 [ 115.905743][T11198] ? __local_bh_enable_ip+0x97/0x1d0 [ 115.911117][T11198] ? ipv6_chk_mcast_addr+0x713/0x7d0 [ 115.916486][T11198] ? kmsan_get_metadata+0x11d/0x180 [ 115.921682][T11198] ip6_protocol_deliver_rcu+0x181b/0x22c0 [ 115.927494][T11198] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 115.933293][T11198] ? ipv6_confirm+0x257/0x650 [ 115.937987][T11198] ip6_mc_input+0xdf2/0x1460 [ 115.942618][T11198] ? ip6_input+0x340/0x340 [ 115.947038][T11198] ? ip6_input_finish+0xa0/0xa0 [ 115.952070][T11198] ipv6_rcv+0x683/0x710 [ 115.956231][T11198] ? local_bh_enable+0x40/0x40 [ 115.960993][T11198] netif_receive_skb+0x66b/0xf20 [ 115.965947][T11198] ? __msan_poison_alloca+0xf0/0x120 [ 115.971250][T11198] tun_get_user+0x6aef/0x6f60 [ 115.975954][T11198] ? kmsan_get_metadata+0x11d/0x180 [ 115.981150][T11198] tun_chr_write_iter+0x1f2/0x360 [ 115.986180][T11198] ? tun_chr_read_iter+0x460/0x460 [ 115.991282][T11198] __vfs_write+0xa5a/0xca0 [ 115.995713][T11198] vfs_write+0x44a/0x8f0 [ 115.999960][T11198] ksys_write+0x267/0x450 [ 116.004295][T11198] __se_sys_write+0x92/0xb0 [ 116.008811][T11198] __x64_sys_write+0x4a/0x70 [ 116.013422][T11198] do_syscall_64+0xb8/0x160 [ 116.017923][T11198] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 116.023941][T11198] RIP: 0033:0x440289 [ 116.028094][T11198] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 116.047797][T11198] RSP: 002b:00007ffde128f478 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 116.056205][T11198] RAX: ffffffffffffffda RBX: 0000000000003172 RCX: 0000000000440289 [ 116.064181][T11198] RDX: 0000000000000fca RSI: 0000000020002580 RDI: 0000000000000003 [ 116.072176][T11198] RBP: 656c6c616b7a7973 R08: 0000000000401b10 R09: 0000000000401b10 [ 116.080158][T11198] R10: 0000000000401b10 R11: 0000000000000246 R12: 0000000000401b10 [ 116.088134][T11198] R13: 0000000000401ba0 R14: 0000000000000000 R15: 0000000000000000 [ 116.097716][T11198] Kernel Offset: 0x19400000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 116.109411][T11198] Rebooting in 86400 seconds..