./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor611951657 <...> forked to background, child pid 3047 no interfaces have a carrier [ 68.625727][ T3048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.651607][ T3048] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.163' (ECDSA) to the list of known hosts. syzkaller login: [ 95.133319][ T1742] cfg80211: failed to load regulatory.db execve("./syz-executor611951657", ["./syz-executor611951657"], 0x7ffc8f8be280 /* 10 vars */) = 0 brk(NULL) = 0x555556e7d000 brk(0x555556e7dc40) = 0x555556e7dc40 arch_prctl(ARCH_SET_FS, 0x555556e7d300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor611951657", 4096) = 27 brk(0x555556e9ec40) = 0x555556e9ec40 brk(0x555556e9f000) = 0x555556e9f000 mprotect(0x7f4aa1cfd000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556e7d5d0) = 3475 ./strace-static-x86_64: Process 3475 attached [pid 3475] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3475] setpgid(0, 0) = 0 [pid 3475] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3475] write(3, "1000", 4) = 4 [pid 3475] close(3) = 0 [pid 3475] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 3475] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4 [pid 3475] sendto(4, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x09\x00\x02\x00\x54\x49\x50\x43\x00\x00\x00\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 32 [pid 3475] recvfrom(4, [{nlmsg_len=88, nlmsg_type=nlctrl, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=3475}, "\x01\x02\x00\x00\x09\x00\x02\x00\x54\x49\x50\x43\x00\x00\x00\x00\x06\x00\x01\x00\x32\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x08\x00\x00\x00\x08\x00\x05\x00\x00\x00\x00\x00\x18\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x02\x00\x00\x00"], 4096, 0, NULL, NULL) = 88 [pid 3475] recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=3475}, {error=0, msg={nlmsg_len=32, nlmsg_type=nlctrl, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 3475] close(4) = 0 [ 97.564175][ T3475] ===================================================== [ 97.571242][ T3475] BUG: KMSAN: uninit-value in tipc_nl_compat_name_table_dump+0x88a/0xeb0 [ 97.579723][ T3475] tipc_nl_compat_name_table_dump+0x88a/0xeb0 [ 97.585846][ T3475] __tipc_nl_compat_dumpit+0xbeb/0x14b0 [ 97.591425][ T3475] tipc_nl_compat_dumpit+0xbb5/0xda0 [ 97.596740][ T3475] tipc_nl_compat_recv+0x11a6/0x2bf0 [ 97.602076][ T3475] genl_rcv_msg+0x157f/0x1660 [ 97.606796][ T3475] netlink_rcv_skb+0x40c/0x7e0 [ 97.611589][ T3475] genl_rcv+0x63/0x80 [ 97.615610][ T3475] netlink_unicast+0x109c/0x1370 [ 97.620584][ T3475] netlink_sendmsg+0x14dc/0x1720 [ 97.625539][ T3475] ____sys_sendmsg+0xe11/0x12c0 [ 97.630439][ T3475] __sys_sendmsg+0x704/0x840 [ 97.635062][ T3475] __x64_sys_sendmsg+0xe2/0x120 [ 97.639940][ T3475] do_syscall_64+0x51/0xa0 [ 97.644397][ T3475] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 97.650309][ T3475] [ 97.652626][ T3475] Uninit was created at: [ 97.656926][ T3475] __kmalloc_node_track_caller+0xde3/0x14f0 [ 97.662864][ T3475] __alloc_skb+0x545/0xf90 [ 97.667321][ T3475] netlink_sendmsg+0xde3/0x1720 [ 97.672195][ T3475] ____sys_sendmsg+0xe11/0x12c0 [ 97.677091][ T3475] __sys_sendmsg+0x704/0x840 [ 97.681701][ T3475] __x64_sys_sendmsg+0xe2/0x120 [ 97.686593][ T3475] do_syscall_64+0x51/0xa0 [ 97.691043][ T3475] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 97.696959][ T3475] [ 97.699281][ T3475] CPU: 0 PID: 3475 Comm: syz-executor611 Not tainted 5.18.0-rc4-syzkaller #0 [ 97.708073][ T3475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 97.718134][ T3475] ===================================================== [ 97.725064][ T3475] Disabling lock debugging due to kernel taint [ 97.731551][ T3475] Kernel panic - not syncing: kmsan.panic set ... [ 97.737992][ T3475] CPU: 0 PID: 3475 Comm: syz-executor611 Tainted: G B 5.18.0-rc4-syzkaller #0 [ 97.748182][ T3475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 97.758262][ T3475] Call Trace: [ 97.761547][ T3475] [ 97.764493][ T3475] dump_stack_lvl+0x1ff/0x28e [ 97.769557][ T3475] dump_stack+0x25/0x28 [ 97.773768][ T3475] panic+0x4fe/0xc73 [ 97.777696][ T3475] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 97.783881][ T3475] ? add_taint+0x181/0x210 [ 97.788322][ T3475] ? console_unlock+0x1c00/0x2130 [ 97.793393][ T3475] ? _raw_spin_unlock_irqrestore+0x78/0xb0 [ 97.799224][ T3475] kmsan_report+0x2e6/0x2f0 [ 97.803745][ T3475] ? kmsan_get_metadata+0x33/0x220 [ 97.808894][ T3475] ? __nla_validate_parse+0x3ce4/0x4fa0 [ 97.814462][ T3475] ? __msan_warning+0x94/0x110 [ 97.819257][ T3475] ? tipc_nl_compat_name_table_dump+0x88a/0xeb0 [ 97.825559][ T3475] ? __tipc_nl_compat_dumpit+0xbeb/0x14b0 [ 97.831338][ T3475] ? tipc_nl_compat_dumpit+0xbb5/0xda0 [ 97.836848][ T3475] ? tipc_nl_compat_recv+0x11a6/0x2bf0 [ 97.842357][ T3475] ? genl_rcv_msg+0x157f/0x1660 [ 97.847251][ T3475] ? netlink_rcv_skb+0x40c/0x7e0 [ 97.852211][ T3475] ? genl_rcv+0x63/0x80 [ 97.856410][ T3475] ? netlink_unicast+0x109c/0x1370 [ 97.861561][ T3475] ? netlink_sendmsg+0x14dc/0x1720 [ 97.866715][ T3475] ? ____sys_sendmsg+0xe11/0x12c0 [ 97.871768][ T3475] ? __sys_sendmsg+0x704/0x840 [ 97.876576][ T3475] ? __x64_sys_sendmsg+0xe2/0x120 [ 97.881634][ T3475] ? do_syscall_64+0x51/0xa0 [ 97.886273][ T3475] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 97.892375][ T3475] ? _raw_spin_unlock+0x50/0x60 [ 97.897252][ T3475] ? __nla_parse+0x13f/0x150 [ 97.901884][ T3475] ? kmsan_get_metadata+0x33/0x220 [ 97.907017][ T3475] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 97.912874][ T3475] __msan_warning+0x94/0x110 [ 97.917519][ T3475] tipc_nl_compat_name_table_dump+0x88a/0xeb0 [ 97.923640][ T3475] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 97.929467][ T3475] ? tipc_nl_compat_name_table_dump_header+0x340/0x340 [ 97.936363][ T3475] __tipc_nl_compat_dumpit+0xbeb/0x14b0 [ 97.941993][ T3475] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 97.948138][ T3475] tipc_nl_compat_dumpit+0xbb5/0xda0 [ 97.953481][ T3475] tipc_nl_compat_recv+0x11a6/0x2bf0 [ 97.958846][ T3475] ? tipc_nl_compat_link_reset_stats+0x560/0x560 [ 97.965232][ T3475] ? tipc_nametbl_stop+0x2870/0x2870 [ 97.970572][ T3475] ? tipc_nl_compat_name_table_dump_header+0x340/0x340 [ 97.977486][ T3475] ? tipc_netlink_compat_stop+0x40/0x40 [ 97.983079][ T3475] genl_rcv_msg+0x157f/0x1660 [ 97.987801][ T3475] ? tipc_netlink_compat_stop+0x40/0x40 [ 97.993403][ T3475] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 97.999683][ T3475] ? kmsan_get_metadata+0x33/0x220 [ 98.004844][ T3475] netlink_rcv_skb+0x40c/0x7e0 [ 98.009649][ T3475] ? genl_bind+0x520/0x520 [ 98.014136][ T3475] genl_rcv+0x63/0x80 [ 98.018171][ T3475] ? genl_pernet_exit+0x90/0x90 [ 98.023054][ T3475] netlink_unicast+0x109c/0x1370 [ 98.028039][ T3475] netlink_sendmsg+0x14dc/0x1720 [ 98.033032][ T3475] ____sys_sendmsg+0xe11/0x12c0 [ 98.037942][ T3475] ? netlink_getsockopt+0x11d0/0x11d0 [ 98.043349][ T3475] __sys_sendmsg+0x704/0x840 [ 98.048003][ T3475] ? kmsan_get_metadata+0x33/0x220 [ 98.053139][ T3475] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 98.058995][ T3475] ? preempt_count_sub+0xf8/0x330 [ 98.064084][ T3475] ? _raw_spin_unlock_irq+0x40/0x60 [ 98.069324][ T3475] ? kmsan_get_metadata+0x33/0x220 [ 98.074457][ T3475] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 98.080315][ T3475] __x64_sys_sendmsg+0xe2/0x120 [ 98.085224][ T3475] do_syscall_64+0x51/0xa0 [ 98.089673][ T3475] ? exc_page_fault+0x76/0x150 [ 98.094491][ T3475] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 98.100408][ T3475] RIP: 0033:0x7f4aa1c907b9 [ 98.104832][ T3475] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 98.124463][ T3475] RSP: 002b:00007ffdc28173e8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.132973][ T3475] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4aa1c907b9 [ 98.140977][ T3475] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 98.148958][ T3475] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffdc2817588 [ 98.156941][ T3475] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4aa1c53ac0 [ 98.164927][ T3475] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000 [ 98.172925][ T3475] [ 98.176125][ T3475] Kernel Offset: disabled [ 98.180458][ T3475] Rebooting in 86400 seconds..