./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor98546010 <...> Warning: Permanently added '10.128.1.89' (ED25519) to the list of known hosts. execve("./syz-executor98546010", ["./syz-executor98546010"], 0x7ffc0c8bfa40 /* 10 vars */) = 0 brk(NULL) = 0x555556d9e000 brk(0x555556d9ed00) = 0x555556d9ed00 arch_prctl(ARCH_SET_FS, 0x555556d9e380) = 0 set_tid_address(0x555556d9e650) = 5014 set_robust_list(0x555556d9e660, 24) = 0 rseq(0x555556d9eca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor98546010", 4096) = 26 getrandom("\x0f\x88\xfc\x30\x17\xe3\x58\x91", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555556d9ed00 brk(0x555556dbfd00) = 0x555556dbfd00 brk(0x555556dc0000) = 0x555556dc0000 mprotect(0x7f243960f000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5015 attached , child_tidptr=0x555556d9e650) = 5015 [pid 5015] set_robust_list(0x555556d9e660, 24) = 0 [pid 5015] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5015] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5015] setsid() = 1 [pid 5015] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5015] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5015] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5015] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5015] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5015] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5015] unshare(CLONE_NEWNS) = 0 [pid 5015] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5015] unshare(CLONE_NEWIPC) = 0 [pid 5015] unshare(CLONE_NEWCGROUP) = 0 [pid 5015] unshare(CLONE_NEWUTS) = 0 [pid 5015] unshare(CLONE_SYSVSEM) = 0 [pid 5015] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5015] write(3, "16777216", 8) = 8 [pid 5015] close(3) = 0 [pid 5015] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5015] write(3, "536870912", 9) = 9 [pid 5015] close(3) = 0 [pid 5015] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5015] write(3, "1024", 4) = 4 [pid 5015] close(3) = 0 [pid 5015] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5015] write(3, "8192", 4) = 4 [pid 5015] close(3) = 0 [pid 5015] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5015] write(3, "1024", 4) = 4 [pid 5015] close(3) = 0 [pid 5015] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5015] write(3, "1024", 4) = 4 [pid 5015] close(3) = 0 [pid 5015] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5015] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5015] close(3) = 0 [pid 5015] getpid() = 1 [pid 5015] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5042] set_robust_list(0x555556d9e660, 24) = 0 [pid 5015] <... clone resumed>, child_tidptr=0x555556d9e650) = 2 [pid 5042] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5042] setpgid(0, 0) = 0 [pid 5042] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5042] write(3, "1000", 4) = 4 [pid 5042] close(3) = 0 [pid 5042] read(200, "\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 5042] read(200, "\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 5042] read(200, "\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 5042] read(200, 0x7ffe375459b0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [ 170.739132][ T5042] ===================================================== [ 170.746505][ T5042] BUG: KMSAN: uninit-value in ip_tunnel_rcv+0xed9/0x2eb0 [ 170.753956][ T5042] ip_tunnel_rcv+0xed9/0x2eb0 [ 170.758968][ T5042] gre_rcv+0x1611/0x19f0 [ 170.763420][ T5042] gre_rcv+0x2a4/0x390 [ 170.767648][ T5042] ip_protocol_deliver_rcu+0x264/0x1300 [ 170.773619][ T5042] ip_local_deliver_finish+0x2b8/0x440 [ 170.779445][ T5042] ip_local_deliver+0x21f/0x490 [ 170.784549][ T5042] ip_rcv+0x476/0x770 [ 170.788862][ T5042] __netif_receive_skb+0x1a6/0x5a0 [ 170.794229][ T5042] netif_receive_skb+0x58/0x660 [ 170.799397][ T5042] tun_rx_batched+0x3ee/0x980 [ 170.804289][ T5042] tun_get_user+0x53af/0x66d0 [ 170.809466][ T5042] tun_chr_write_iter+0x3af/0x5d0 [ 170.814696][ T5042] vfs_write+0x8ef/0x1490 [ 170.819332][ T5042] ksys_write+0x20f/0x4c0 [ 170.823837][ T5042] __x64_sys_write+0x93/0xd0 [ 170.828790][ T5042] do_syscall_64+0x44/0x110 [ 170.833558][ T5042] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 170.839818][ T5042] [ 170.842232][ T5042] Uninit was created at: [ 170.846647][ T5042] __alloc_pages+0x9a4/0xe00 [ 170.851513][ T5042] alloc_pages_mpol+0x62b/0x9d0 [ 170.856609][ T5042] alloc_pages+0x1be/0x1e0 [ 170.861443][ T5042] skb_page_frag_refill+0x2bf/0x7c0 [ 170.866866][ T5042] tun_get_user+0xe0a/0x66d0 [ 170.871855][ T5042] tun_chr_write_iter+0x3af/0x5d0 [ 170.877087][ T5042] vfs_write+0x8ef/0x1490 [ 170.881736][ T5042] ksys_write+0x20f/0x4c0 [ 170.886247][ T5042] __x64_sys_write+0x93/0xd0 [ 170.891217][ T5042] do_syscall_64+0x44/0x110 [ 170.895927][ T5042] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 170.902178][ T5042] [ 170.904702][ T5042] CPU: 1 PID: 5042 Comm: syz-executor985 Not tainted 6.7.0-rc8-syzkaller #0 [ 170.913743][ T5042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 170.925659][ T5042] ===================================================== [ 170.932870][ T5042] Disabling lock debugging due to kernel taint [ 170.939403][ T5042] Kernel panic - not syncing: kmsan.panic set ... [ 170.945966][ T5042] CPU: 1 PID: 5042 Comm: syz-executor985 Tainted: G B 6.7.0-rc8-syzkaller #0 [ 170.956342][ T5042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 170.966565][ T5042] Call Trace: [ 170.969946][ T5042] [ 170.973010][ T5042] dump_stack_lvl+0x1bf/0x240 [ 170.978024][ T5042] dump_stack+0x1e/0x20 [ 170.982400][ T5042] panic+0x4de/0xc90 [ 170.986577][ T5042] ? add_taint+0x108/0x1a0 [ 170.991140][ T5042] kmsan_report+0x2d0/0x2d0 [ 170.995793][ T5042] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 171.001766][ T5042] ? call_rcu+0x7c/0x900 [ 171.006262][ T5042] ? __msan_warning+0x96/0x110 [ 171.011198][ T5042] ? ip_tunnel_rcv+0xed9/0x2eb0 [ 171.016196][ T5042] ? gre_rcv+0x1611/0x19f0 [ 171.020754][ T5042] ? gre_rcv+0x2a4/0x390 [ 171.025163][ T5042] ? ip_protocol_deliver_rcu+0x264/0x1300 [ 171.031258][ T5042] ? ip_local_deliver_finish+0x2b8/0x440 [ 171.037175][ T5042] ? ip_local_deliver+0x21f/0x490 [ 171.042455][ T5042] ? ip_rcv+0x476/0x770 [ 171.046804][ T5042] ? __netif_receive_skb+0x1a6/0x5a0 [ 171.052312][ T5042] ? netif_receive_skb+0x58/0x660 [ 171.057536][ T5042] ? tun_rx_batched+0x3ee/0x980 [ 171.062618][ T5042] ? tun_get_user+0x53af/0x66d0 [ 171.067697][ T5042] ? tun_chr_write_iter+0x3af/0x5d0 [ 171.073187][ T5042] ? vfs_write+0x8ef/0x1490 [ 171.077830][ T5042] ? ksys_write+0x20f/0x4c0 [ 171.082458][ T5042] ? __x64_sys_write+0x93/0xd0 [ 171.087337][ T5042] ? do_syscall_64+0x44/0x110 [ 171.092159][ T5042] ? entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 171.098422][ T5042] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 171.104492][ T5042] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 171.110494][ T5042] ? call_rcu+0x48f/0x900 [ 171.115060][ T5042] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 171.121540][ T5042] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 171.127540][ T5042] __msan_warning+0x96/0x110 [ 171.132390][ T5042] ip_tunnel_rcv+0xed9/0x2eb0 [ 171.137282][ T5042] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 171.143356][ T5042] gre_rcv+0x1611/0x19f0 [ 171.147815][ T5042] ? raw_local_deliver+0x139a/0x13c0 [ 171.153347][ T5042] ? erspan_build_header_v2+0x500/0x500 [ 171.159142][ T5042] gre_rcv+0x2a4/0x390 [ 171.163364][ T5042] ? gre_parse_header+0x1a40/0x1a40 [ 171.168800][ T5042] ip_protocol_deliver_rcu+0x264/0x1300 [ 171.174571][ T5042] ip_local_deliver_finish+0x2b8/0x440 [ 171.180315][ T5042] ip_local_deliver+0x21f/0x490 [ 171.185431][ T5042] ? ip_local_deliver+0x490/0x490 [ 171.190623][ T5042] ? ip_protocol_deliver_rcu+0x1300/0x1300 [ 171.196627][ T5042] ip_rcv+0x476/0x770 [ 171.200872][ T5042] ? ip_rcv_core+0x16b0/0x16b0 [ 171.205915][ T5042] __netif_receive_skb+0x1a6/0x5a0 [ 171.211385][ T5042] ? ip_local_deliver_finish+0x440/0x440 [ 171.217291][ T5042] netif_receive_skb+0x58/0x660 [ 171.222358][ T5042] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 171.228429][ T5042] ? tun_rx_batched+0x37c/0x980 [ 171.233716][ T5042] tun_rx_batched+0x3ee/0x980 [ 171.238537][ T5042] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 171.244532][ T5042] tun_get_user+0x53af/0x66d0 [ 171.249438][ T5042] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 171.255957][ T5042] ? do_faccessat+0x1080/0x11a0 [ 171.261095][ T5042] tun_chr_write_iter+0x3af/0x5d0 [ 171.266370][ T5042] ? tun_chr_read_iter+0x670/0x670 [ 171.271621][ T5042] vfs_write+0x8ef/0x1490 [ 171.276090][ T5042] ksys_write+0x20f/0x4c0 [ 171.280585][ T5042] __x64_sys_write+0x93/0xd0 [ 171.285428][ T5042] do_syscall_64+0x44/0x110 [ 171.290105][ T5042] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 171.296182][ T5042] RIP: 0033:0x7f24395963b0 [ 171.300766][ T5042] Code: 40 00 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b7 0f 1f 00 80 3d d1 dc 07 00 00 74 17 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 58 c3 0f 1f 80 00 00 00 00 48 83 ec 28 48 89 [ 171.320584][ T5042] RSP: 002b:00007ffe37545da8 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 171.329159][ T5042] RAX: ffffffffffffffda RBX: 00007ffe37545e50 RCX: 00007f24395963b0 [ 171.337323][ T5042] RDX: 0000000000000034 RSI: 0000000020000080 RDI: 00000000000000c8 [ 171.345443][ T5042] RBP: 00007ffe37545e00 R08: 0000000000000000 R09: 0000000000000000 [ 171.353612][ T5042] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000000f4240 [ 171.361733][ T5042] R13: 00007ffe37545e20 R14: 00007ffe37545dd4 R15: 00007ffe37545df0 [ 171.369971][ T5042] [ 171.373418][ T5042] Kernel Offset: disabled [ 171.378079][ T5042] Rebooting in 86400 seconds..