./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1164776703 <...> no interfaces have a carrier [ 82.695926][ T3060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.740740][ T3060] eql: remember to turn off Van-Jacobson compression on your slave devices [ 83.765813][ T3149] ssh-keygen (3149) used greatest stack depth: 5112 bytes left Starting sshd: OK syzkaller syzkaller login: [ 105.363697][ T25] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.64' (ECDSA) to the list of known hosts. execve("./syz-executor1164776703", ["./syz-executor1164776703"], 0x7fff20fe2880 /* 10 vars */) = 0 brk(NULL) = 0x555557393000 brk(0x555557393c40) = 0x555557393c40 arch_prctl(ARCH_SET_FS, 0x555557393300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1164776703", 4096) = 28 brk(0x5555573b4c40) = 0x5555573b4c40 brk(0x5555573b5000) = 0x5555573b5000 mprotect(0x7fd8e835b000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573935d0) = 3491 ./strace-static-x86_64: Process 3491 attached [pid 3491] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3491] setpgid(0, 0) = 0 [pid 3491] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3491] write(3, "1000", 4) = 4 [pid 3491] close(3) = 0 [pid 3491] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 3491] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4 [pid 3491] sendto(4, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0b\x00\x02\x00\x54\x49\x50\x43\x76\x32\x00\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 32 [pid 3491] recvfrom(4, [{nlmsg_len=548, nlmsg_type=nlctrl, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=3491}, "\x01\x02\x00\x00\x0b\x00\x02\x00\x54\x49\x50\x43\x76\x32\x00\x00\x06\x00\x01\x00\x30\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\xe4\x01\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x03\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 548 [pid 3491] recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=3491}, {error=0, msg={nlmsg_len=32, nlmsg_type=nlctrl, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 3491] close(4) = 0 [ 119.014613][ T3491] ===================================================== [ 119.021745][ T3491] BUG: KMSAN: uninit-value in strstr+0xb4/0x2e0 [ 119.028330][ T3491] strstr+0xb4/0x2e0 [ 119.032537][ T3491] tipc_nl_node_reset_link_stats+0x41e/0xba0 [ 119.038654][ T3491] genl_rcv_msg+0x103f/0x1260 [ 119.043623][ T3491] netlink_rcv_skb+0x3a5/0x6c0 [ 119.048516][ T3491] genl_rcv+0x3c/0x50 [ 119.052804][ T3491] netlink_unicast+0xf3b/0x1270 [ 119.057778][ T3491] netlink_sendmsg+0x1288/0x1440 [ 119.062943][ T3491] ____sys_sendmsg+0xabc/0xe90 [ 119.067829][ T3491] ___sys_sendmsg+0x2a1/0x3f0 [ 119.072755][ T3491] __x64_sys_sendmsg+0x367/0x540 [ 119.077903][ T3491] do_syscall_64+0x3d/0xb0 [ 119.082636][ T3491] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 119.088707][ T3491] [ 119.091060][ T3491] Uninit was created at: [ 119.095652][ T3491] __kmalloc_node_track_caller+0x814/0x1250 [ 119.101670][ T3491] __alloc_skb+0x346/0xcf0 [ 119.106299][ T3491] netlink_sendmsg+0xb71/0x1440 [ 119.111290][ T3491] ____sys_sendmsg+0xabc/0xe90 [ 119.116337][ T3491] ___sys_sendmsg+0x2a1/0x3f0 [ 119.121224][ T3491] __x64_sys_sendmsg+0x367/0x540 [ 119.126446][ T3491] do_syscall_64+0x3d/0xb0 [ 119.130967][ T3491] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 119.137328][ T3491] [ 119.139706][ T3491] CPU: 0 PID: 3491 Comm: syz-executor116 Not tainted 6.0.0-rc5-syzkaller-48543-g968c2729e576 #0 [ 119.150409][ T3491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 119.160712][ T3491] ===================================================== [ 119.167813][ T3491] Disabling lock debugging due to kernel taint [ 119.174119][ T3491] Kernel panic - not syncing: kmsan.panic set ... [ 119.180601][ T3491] CPU: 0 PID: 3491 Comm: syz-executor116 Tainted: G B 6.0.0-rc5-syzkaller-48543-g968c2729e576 #0 [ 119.192618][ T3491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 119.202740][ T3491] Call Trace: [ 119.206058][ T3491] [ 119.209043][ T3491] dump_stack_lvl+0x1c8/0x256 [ 119.213897][ T3491] dump_stack+0x1a/0x1c [ 119.218166][ T3491] panic+0x4d3/0xc69 [ 119.222226][ T3491] ? add_taint+0x104/0x1a0 [ 119.226791][ T3491] kmsan_report+0x2cc/0x2d0 [ 119.231405][ T3491] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 119.237809][ T3491] ? __msan_warning+0x92/0x110 [ 119.242703][ T3491] ? strstr+0xb4/0x2e0 [ 119.246855][ T3491] ? tipc_nl_node_reset_link_stats+0x41e/0xba0 [ 119.253146][ T3491] ? genl_rcv_msg+0x103f/0x1260 [ 119.258097][ T3491] ? netlink_rcv_skb+0x3a5/0x6c0 [ 119.263159][ T3491] ? genl_rcv+0x3c/0x50 [ 119.267404][ T3491] ? netlink_unicast+0xf3b/0x1270 [ 119.272542][ T3491] ? netlink_sendmsg+0x1288/0x1440 [ 119.277753][ T3491] ? ____sys_sendmsg+0xabc/0xe90 [ 119.282820][ T3491] ? ___sys_sendmsg+0x2a1/0x3f0 [ 119.287782][ T3491] ? __x64_sys_sendmsg+0x367/0x540 [ 119.292985][ T3491] ? do_syscall_64+0x3d/0xb0 [ 119.297653][ T3491] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 119.303868][ T3491] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 119.309854][ T3491] ? __nla_validate_parse+0x371f/0x4240 [ 119.315554][ T3491] ? preempt_count_add+0x270/0x290 [ 119.320843][ T3491] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 119.326819][ T3491] __msan_warning+0x92/0x110 [ 119.331541][ T3491] strstr+0xb4/0x2e0 [ 119.335504][ T3491] ? strcmp+0x5f/0x120 [ 119.339688][ T3491] tipc_nl_node_reset_link_stats+0x41e/0xba0 [ 119.345849][ T3491] ? tipc_nl_node_get_link+0x9b0/0x9b0 [ 119.351457][ T3491] genl_rcv_msg+0x103f/0x1260 [ 119.356271][ T3491] ? tipc_nl_node_get_link+0x9b0/0x9b0 [ 119.361850][ T3491] netlink_rcv_skb+0x3a5/0x6c0 [ 119.366715][ T3491] ? genl_bind+0x490/0x490 [ 119.371262][ T3491] ? genl_pernet_exit+0x60/0x60 [ 119.376215][ T3491] genl_rcv+0x3c/0x50 [ 119.380328][ T3491] netlink_unicast+0xf3b/0x1270 [ 119.385309][ T3491] netlink_sendmsg+0x1288/0x1440 [ 119.390340][ T3491] ? netlink_getsockopt+0x13b0/0x13b0 [ 119.395821][ T3491] ____sys_sendmsg+0xabc/0xe90 [ 119.400716][ T3491] ___sys_sendmsg+0x2a1/0x3f0 [ 119.405527][ T3491] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 119.411445][ T3491] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 119.417532][ T3491] __x64_sys_sendmsg+0x367/0x540 [ 119.422575][ T3491] do_syscall_64+0x3d/0xb0 [ 119.427066][ T3491] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 119.433081][ T3491] RIP: 0033:0x7fd8e82ee759 [ 119.437579][ T3491] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 119.457332][ T3491] RSP: 002b:00007ffd1eddea18 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 119.465861][ T3491] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd8e82ee759 [ 119.473949][ T3491] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 119.482046][ T3491] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffd1eddebb8 [ 119.490092][ T3491] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8e82b1a60 [ 119.498159][ T3491] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000 [ 119.506270][ T3491] [ 119.509648][ T3491] Kernel Offset: disabled [ 119.514044][ T3491] Rebooting in 86400 seconds..