================================================================== BUG: KMSAN: uninit-value in ip6t_mangle_out net/ipv6/netfilter/ip6table_mangle.c:60 [inline] BUG: KMSAN: uninit-value in ip6table_mangle_hook+0x97e/0xb00 net/ipv6/netfilter/ip6table_mangle.c:77 CPU: 1 PID: 7526 Comm: syz-executor5 Not tainted 4.16.0+ #87 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x185/0x1d0 lib/dump_stack.c:53 kmsan_report+0x142/0x240 mm/kmsan/kmsan.c:1067 __msan_warning_32+0x6c/0xb0 mm/kmsan/kmsan_instr.c:683 ip6t_mangle_out net/ipv6/netfilter/ip6table_mangle.c:60 [inline] ip6table_mangle_hook+0x97e/0xb00 net/ipv6/netfilter/ip6table_mangle.c:77 nf_hook_entry_hookfn include/linux/netfilter.h:120 [inline] nf_hook_slow+0x158/0x3d0 net/netfilter/core.c:483 nf_hook include/linux/netfilter.h:243 [inline] NF_HOOK include/linux/netfilter.h:286 [inline] ip6_xmit+0x1cc8/0x23d0 net/ipv6/ip6_output.c:277 inet6_csk_xmit+0x35b/0x440 net/ipv6/inet6_connection_sock.c:139 dccp_transmit_skb+0x15eb/0x1900 net/dccp/output.c:142 dccp_send_reset+0x398/0x4e0 net/dccp/output.c:530 dccp_finish_passive_close net/dccp/proto.c:126 [inline] dccp_terminate_connection net/dccp/proto.c:982 [inline] dccp_close+0x19c7/0x1d20 net/dccp/proto.c:1052 inet_release+0x240/0x2a0 net/ipv4/af_inet.c:427 inet6_release+0xaf/0x100 net/ipv6/af_inet6.c:435 sock_release net/socket.c:595 [inline] sock_close+0xe0/0x300 net/socket.c:1149 __fput+0x49e/0xa10 fs/file_table.c:209 ____fput+0x37/0x40 fs/file_table.c:243 task_work_run+0x243/0x2c0 kernel/task_work.c:113 tracehook_notify_resume include/linux/tracehook.h:191 [inline] exit_to_usermode_loop arch/x86/entry/common.c:166 [inline] prepare_exit_to_usermode+0x33c/0x3a0 arch/x86/entry/common.c:196 syscall_return_slowpath+0xe9/0x700 arch/x86/entry/common.c:265 do_syscall_64+0x36d/0x430 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x3d/0xa2 RIP: 0033:0x455979 RSP: 002b:00007f0ec36e8c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 RAX: 0000000000000000 RBX: 00007f0ec36e96d4 RCX: 0000000000455979 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000014 RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff R13: 0000000000000053 R14: 00000000006f4868 R15: 0000000000000000 Uninit was stored to memory at: kmsan_save_stack_with_flags mm/kmsan/kmsan.c:278 [inline] kmsan_save_stack mm/kmsan/kmsan.c:293 [inline] kmsan_internal_chain_origin+0x12b/0x210 mm/kmsan/kmsan.c:684 __msan_chain_origin+0x69/0xc0 mm/kmsan/kmsan_instr.c:528 ip6_xmit+0x18a5/0x23d0 net/ipv6/ip6_output.c:260 inet6_csk_xmit+0x35b/0x440 net/ipv6/inet6_connection_sock.c:139 dccp_transmit_skb+0x15eb/0x1900 net/dccp/output.c:142 dccp_send_reset+0x398/0x4e0 net/dccp/output.c:530 dccp_finish_passive_close net/dccp/proto.c:126 [inline] dccp_terminate_connection net/dccp/proto.c:982 [inline] dccp_close+0x19c7/0x1d20 net/dccp/proto.c:1052 inet_release+0x240/0x2a0 net/ipv4/af_inet.c:427 inet6_release+0xaf/0x100 net/ipv6/af_inet6.c:435 sock_release net/socket.c:595 [inline] sock_close+0xe0/0x300 net/socket.c:1149 __fput+0x49e/0xa10 fs/file_table.c:209 ____fput+0x37/0x40 fs/file_table.c:243 task_work_run+0x243/0x2c0 kernel/task_work.c:113 tracehook_notify_resume include/linux/tracehook.h:191 [inline] exit_to_usermode_loop arch/x86/entry/common.c:166 [inline] prepare_exit_to_usermode+0x33c/0x3a0 arch/x86/entry/common.c:196 syscall_return_slowpath+0xe9/0x700 arch/x86/entry/common.c:265 do_syscall_64+0x36d/0x430 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x3d/0xa2 Uninit was stored to memory at: kmsan_save_stack_with_flags mm/kmsan/kmsan.c:278 [inline] kmsan_save_stack mm/kmsan/kmsan.c:293 [inline] kmsan_internal_chain_origin+0x12b/0x210 mm/kmsan/kmsan.c:684 __msan_chain_origin+0x69/0xc0 mm/kmsan/kmsan_instr.c:528 inet_csk_clone_lock+0x503/0x580 net/ipv4/inet_connection_sock.c:797 dccp_create_openreq_child+0x7f/0x890 net/dccp/minisocks.c:92 dccp_v6_request_recv_sock+0x8e4/0x2090 net/dccp/ipv6.c:465 dccp_check_req+0x7b9/0x8f0 net/dccp/minisocks.c:197 dccp_v6_rcv+0x11a5/0x2420 net/dccp/ipv6.c:743 ip6_input_finish+0xaac/0x2250 net/ipv6/ip6_input.c:284 NF_HOOK include/linux/netfilter.h:288 [inline] ip6_input+0x294/0x320 net/ipv6/ip6_input.c:327 dst_input include/net/dst.h:449 [inline] ip6_rcv_finish+0x46e/0x6e0 net/ipv6/ip6_input.c:71 NF_HOOK include/linux/netfilter.h:288 [inline] ipv6_rcv+0x1e16/0x2340 net/ipv6/ip6_input.c:208 __netif_receive_skb_core+0x47df/0x4a90 net/core/dev.c:4562 __netif_receive_skb net/core/dev.c:4627 [inline] process_backlog+0x62d/0xe20 net/core/dev.c:5307 napi_poll net/core/dev.c:5705 [inline] net_rx_action+0x7c1/0x1a70 net/core/dev.c:5771 __do_softirq+0x56d/0x93d kernel/softirq.c:285 Uninit was created at: kmsan_save_stack_with_flags mm/kmsan/kmsan.c:278 [inline] kmsan_internal_poison_shadow+0xb8/0x1b0 mm/kmsan/kmsan.c:188 kmsan_kmalloc+0x94/0x100 mm/kmsan/kmsan.c:314 kmem_cache_alloc+0xaab/0xb90 mm/slub.c:2756 reqsk_alloc include/net/request_sock.h:88 [inline] inet_reqsk_alloc+0xc4/0x7f0 net/ipv4/tcp_input.c:6145 dccp_v6_conn_request+0x708/0x18f0 net/dccp/ipv6.c:336 dccp_rcv_state_process+0x2ea/0x2410 net/dccp/input.c:612 dccp_v6_do_rcv+0x55e/0x1290 net/dccp/ipv6.c:637 sk_backlog_rcv include/net/sock.h:908 [inline] __sk_receive_skb+0x60e/0xf20 net/core/sock.c:513 dccp_v6_rcv+0x22be/0x2420 net/dccp/ipv6.c:774 ip6_input_finish+0xaac/0x2250 net/ipv6/ip6_input.c:284 NF_HOOK include/linux/netfilter.h:288 [inline] ip6_input+0x294/0x320 net/ipv6/ip6_input.c:327 dst_input include/net/dst.h:449 [inline] ip6_rcv_finish+0x46e/0x6e0 net/ipv6/ip6_input.c:71 NF_HOOK include/linux/netfilter.h:288 [inline] ipv6_rcv+0x1e16/0x2340 net/ipv6/ip6_input.c:208 __netif_receive_skb_core+0x47df/0x4a90 net/core/dev.c:4562 __netif_receive_skb net/core/dev.c:4627 [inline] process_backlog+0x62d/0xe20 net/core/dev.c:5307 napi_poll net/core/dev.c:5705 [inline] net_rx_action+0x7c1/0x1a70 net/core/dev.c:5771 __do_softirq+0x56d/0x93d kernel/softirq.c:285 ==================================================================