./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor699409985 <...> Warning: Permanently added '10.128.0.6' (ED25519) to the list of known hosts. execve("./syz-executor699409985", ["./syz-executor699409985"], 0x7ffc13c46f90 /* 10 vars */) = 0 brk(NULL) = 0x555555950000 brk(0x555555950d00) = 0x555555950d00 arch_prctl(ARCH_SET_FS, 0x555555950380) = 0 set_tid_address(0x555555950650) = 4989 set_robust_list(0x555555950660, 24) = 0 rseq(0x555555950ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor699409985", 4096) = 27 getrandom("\x93\x26\xf3\xee\xa1\xb9\xd8\x34", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555555950d00 brk(0x555555971d00) = 0x555555971d00 brk(0x555555972000) = 0x555555972000 mprotect(0x7f1f1f4b2000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555950650) = 4990 ./strace-static-x86_64: Process 4990 attached [pid 4990] set_robust_list(0x555555950660, 24) = 0 [pid 4990] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4990] setpgid(0, 0) = 0 [pid 4990] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4990] write(3, "1000", 4) = 4 [pid 4990] close(3) = 0 [pid 4990] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|O_CREAT|O_TRUNC|O_APPEND|O_NONBLOCK|O_LARGEFILE|O_NOFOLLOW|FASYNC, 000) = 3 [pid 4990] ioctl(3, TUNSETIFF, 0x20000200) = 0 [pid 4990] socket(AF_INET, SOCK_PACKET, IPPROTO_IGMP) = 4 [pid 4990] ioctl(4, SIOCSIFFLAGS, {ifr_name="syzkaller1", ifr_flags=IFF_UP|IFF_DYNAMIC}) = 0 [ 162.297840][ T4990] syz-executor699 uses obsolete (PF_INET,SOCK_PACKET) [ 162.328831][ T4990] ===================================================== [ 162.336217][ T4990] BUG: KMSAN: uninit-value in llc_rcv+0x1107/0x14a0 [ 162.343166][ T4990] llc_rcv+0x1107/0x14a0 [ 162.347628][ T4990] __netif_receive_skb+0x1a6/0x5a0 [ 162.353179][ T4990] netif_receive_skb+0x58/0x660 [ 162.358263][ T4990] tun_rx_batched+0x3ee/0x980 [ 162.363291][ T4990] tun_get_user+0x54c5/0x69c0 [ 162.368147][ T4990] tun_chr_write_iter+0x3af/0x5d0 [ 162.373626][ T4990] vfs_write+0x8ef/0x15c0 [ 162.378154][ T4990] ksys_write+0x20f/0x4c0 [ 162.382802][ T4990] __x64_sys_write+0x93/0xd0 [ 162.387593][ T4990] do_syscall_64+0x41/0xc0 [ 162.392284][ T4990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 162.398437][ T4990] [ 162.400880][ T4990] Uninit was created at: [ 162.405476][ T4990] slab_post_alloc_hook+0x12f/0xb70 [ 162.410992][ T4990] kmem_cache_alloc_node+0x577/0xa80 [ 162.416622][ T4990] kmalloc_reserve+0x13d/0x4a0 [ 162.421685][ T4990] __alloc_skb+0x318/0x740 [ 162.426328][ T4990] alloc_skb_with_frags+0xc8/0xbd0 [ 162.431754][ T4990] sock_alloc_send_pskb+0xa80/0xbf0 [ 162.437168][ T4990] tun_get_user+0x23d0/0x69c0 [ 162.442121][ T4990] tun_chr_write_iter+0x3af/0x5d0 [ 162.447349][ T4990] vfs_write+0x8ef/0x15c0 [ 162.452003][ T4990] ksys_write+0x20f/0x4c0 [ 162.456536][ T4990] __x64_sys_write+0x93/0xd0 [ 162.461425][ T4990] do_syscall_64+0x41/0xc0 [ 162.466016][ T4990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 162.472266][ T4990] [ 162.474685][ T4990] CPU: 0 PID: 4990 Comm: syz-executor699 Not tainted 6.6.0-rc3-syzkaller-00214-ge402b08634b3 #0 [ 162.485395][ T4990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 162.495753][ T4990] ===================================================== [ 162.502914][ T4990] Disabling lock debugging due to kernel taint [ 162.509219][ T4990] Kernel panic - not syncing: kmsan.panic set ... [ 162.515759][ T4990] CPU: 0 PID: 4990 Comm: syz-executor699 Tainted: G B 6.6.0-rc3-syzkaller-00214-ge402b08634b3 #0 [ 162.527872][ T4990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 162.538075][ T4990] Call Trace: [ 162.541473][ T4990] [ 162.544546][ T4990] dump_stack_lvl+0x1bf/0x240 [ 162.549431][ T4990] dump_stack+0x1e/0x20 [ 162.553777][ T4990] panic+0x4d5/0xc70 [ 162.557906][ T4990] ? add_taint+0x108/0x1a0 [ 162.562541][ T4990] kmsan_report+0x2d0/0x2d0 [ 162.567264][ T4990] ? __msan_warning+0x96/0x110 [ 162.572272][ T4990] ? llc_rcv+0x1107/0x14a0 [ 162.576898][ T4990] ? __netif_receive_skb+0x1a6/0x5a0 [ 162.582428][ T4990] ? netif_receive_skb+0x58/0x660 [ 162.587679][ T4990] ? tun_rx_batched+0x3ee/0x980 [ 162.592726][ T4990] ? tun_get_user+0x54c5/0x69c0 [ 162.597786][ T4990] ? tun_chr_write_iter+0x3af/0x5d0 [ 162.603173][ T4990] ? vfs_write+0x8ef/0x15c0 [ 162.607881][ T4990] ? ksys_write+0x20f/0x4c0 [ 162.612586][ T4990] ? __x64_sys_write+0x93/0xd0 [ 162.617556][ T4990] ? do_syscall_64+0x41/0xc0 [ 162.622328][ T4990] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 162.628670][ T4990] ? kmsan_internal_memmove_metadata+0x9a/0x360 [ 162.635149][ T4990] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 162.641180][ T4990] ? __pskb_pull_tail+0x1d03/0x2310 [ 162.646572][ T4990] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 162.652605][ T4990] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 162.658658][ T4990] __msan_warning+0x96/0x110 [ 162.663547][ T4990] llc_rcv+0x1107/0x14a0 [ 162.668041][ T4990] __netif_receive_skb+0x1a6/0x5a0 [ 162.673414][ T4990] ? llc_set_station_handler+0x70/0x70 [ 162.679110][ T4990] netif_receive_skb+0x58/0x660 [ 162.684173][ T4990] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 162.690206][ T4990] ? tun_rx_batched+0x37c/0x980 [ 162.695240][ T4990] tun_rx_batched+0x3ee/0x980 [ 162.700190][ T4990] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 162.706247][ T4990] tun_get_user+0x54c5/0x69c0 [ 162.711203][ T4990] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 162.717704][ T4990] tun_chr_write_iter+0x3af/0x5d0 [ 162.722981][ T4990] ? tun_chr_read_iter+0x670/0x670 [ 162.728273][ T4990] vfs_write+0x8ef/0x15c0 [ 162.732841][ T4990] ksys_write+0x20f/0x4c0 [ 162.737427][ T4990] __x64_sys_write+0x93/0xd0 [ 162.742248][ T4990] do_syscall_64+0x41/0xc0 [ 162.746862][ T4990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 162.753026][ T4990] RIP: 0033:0x7f1f1f43fab9 [ 162.757656][ T4990] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 162.777491][ T4990] RSP: 002b:00007ffe75dc05c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 162.786119][ T4990] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1f1f43fab9 [ 162.794282][ T4990] RDX: 0000000000000fce RSI: 00000000200002c0 RDI: 0000000000000003 [ 162.802423][ T4990] RBP: 00007f1f1f4b25f0 R08: 0000000000000006 R09: 0000000000000006 [ 162.810571][ T4990] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 162.818714][ T4990] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 162.826883][ T4990] [ 162.830370][ T4990] Kernel Offset: disabled [ 162.834766][ T4990] Rebooting in 86400 seconds..