./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor391927015 <...> forked to background, child pid 4586 no interfaces have a carrier [ 95.315237][ T4587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.340993][ T4587] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller syzkaller login: [ 105.363647][ T1528] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.198' (ECDSA) to the list of known hosts. execve("./syz-executor391927015", ["./syz-executor391927015"], 0x7fff7567bec0 /* 10 vars */) = 0 brk(NULL) = 0x555555583000 brk(0x555555583c40) = 0x555555583c40 arch_prctl(ARCH_SET_FS, 0x555555583300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor391927015", 4096) = 27 brk(0x5555555a4c40) = 0x5555555a4c40 brk(0x5555555a5000) = 0x5555555a5000 mprotect(0x7f4341a81000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555555835d0) = 5025 ./strace-static-x86_64: Process 5025 attached [pid 5025] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5025] setpgid(0, 0) = 0 [pid 5025] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5025] write(3, "1000", 4) = 4 [pid 5025] close(3) = 0 [pid 5025] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 5025] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4 [pid 5025] sendto(4, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0b\x00\x02\x00\x54\x49\x50\x43\x76\x32\x00\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 32 [pid 5025] recvfrom(4, [{nlmsg_len=548, nlmsg_type=nlctrl, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=5025}, "\x01\x02\x00\x00\x0b\x00\x02\x00\x54\x49\x50\x43\x76\x32\x00\x00\x06\x00\x01\x00\x30\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\xe4\x01\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x03\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 548 [pid 5025] recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5025}, {error=0, msg={nlmsg_len=32, nlmsg_type=nlctrl, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5025] close(4) = 0 [ 134.291979][ T5025] netlink: 12 bytes leftover after parsing attributes in process `syz-executor391'. [ 134.301722][ T5025] ===================================================== [ 134.309068][ T5025] BUG: KMSAN: uninit-value in strstr+0xb4/0x2e0 [ 134.315556][ T5025] strstr+0xb4/0x2e0 [ 134.319623][ T5025] tipc_nl_node_reset_link_stats+0x41e/0xba0 [ 134.325910][ T5025] genl_rcv_msg+0x1447/0x14e0 [ 134.330792][ T5025] netlink_rcv_skb+0x3f1/0x750 [ 134.335801][ T5025] genl_rcv+0x3c/0x50 [ 134.339926][ T5025] netlink_unicast+0xf3b/0x1270 [ 134.345037][ T5025] netlink_sendmsg+0x127d/0x1430 [ 134.350132][ T5025] ____sys_sendmsg+0xa8e/0xe70 [ 134.355146][ T5025] ___sys_sendmsg+0x2a1/0x3f0 [ 134.359965][ T5025] __x64_sys_sendmsg+0x367/0x540 [ 134.365156][ T5025] do_syscall_64+0x3d/0xb0 [ 134.369723][ T5025] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 134.375835][ T5025] [ 134.378225][ T5025] Uninit was created at: [ 134.382714][ T5025] __kmem_cache_alloc_node+0x71f/0xce0 [ 134.388336][ T5025] __kmalloc_node_track_caller+0x114/0x3b0 [ 134.394493][ T5025] __alloc_skb+0x3af/0x8f0 [ 134.399052][ T5025] netlink_sendmsg+0xb66/0x1430 [ 134.404139][ T5025] ____sys_sendmsg+0xa8e/0xe70 [ 134.409065][ T5025] ___sys_sendmsg+0x2a1/0x3f0 [ 134.413993][ T5025] __x64_sys_sendmsg+0x367/0x540 [ 134.419094][ T5025] do_syscall_64+0x3d/0xb0 [ 134.423774][ T5025] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 134.429821][ T5025] [ 134.432309][ T5025] CPU: 0 PID: 5025 Comm: syz-executor391 Not tainted 6.2.0-rc5-syzkaller-80200-g41c66f470616 #0 [ 134.442910][ T5025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 134.453222][ T5025] ===================================================== [ 134.460281][ T5025] Disabling lock debugging due to kernel taint [ 134.466763][ T5025] Kernel panic - not syncing: kmsan.panic set ... [ 134.473273][ T5025] CPU: 0 PID: 5025 Comm: syz-executor391 Tainted: G B 6.2.0-rc5-syzkaller-80200-g41c66f470616 #0 [ 134.485410][ T5025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 134.495577][ T5025] Call Trace: [ 134.498928][ T5025] [ 134.501938][ T5025] dump_stack_lvl+0x1c8/0x260 [ 134.506841][ T5025] dump_stack+0x1a/0x20 [ 134.511255][ T5025] panic+0x4d3/0xc70 [ 134.515317][ T5025] ? add_taint+0x104/0x1a0 [ 134.519904][ T5025] kmsan_report+0x2cc/0x2d0 [ 134.524536][ T5025] ? _printk+0x160/0x1a0 [ 134.528958][ T5025] ? __msan_warning+0x92/0x110 [ 134.533858][ T5025] ? strstr+0xb4/0x2e0 [ 134.538032][ T5025] ? tipc_nl_node_reset_link_stats+0x41e/0xba0 [ 134.544361][ T5025] ? genl_rcv_msg+0x1447/0x14e0 [ 134.549375][ T5025] ? netlink_rcv_skb+0x3f1/0x750 [ 134.554432][ T5025] ? genl_rcv+0x3c/0x50 [ 134.558749][ T5025] ? netlink_unicast+0xf3b/0x1270 [ 134.563920][ T5025] ? netlink_sendmsg+0x127d/0x1430 [ 134.569159][ T5025] ? ____sys_sendmsg+0xa8e/0xe70 [ 134.574210][ T5025] ? ___sys_sendmsg+0x2a1/0x3f0 [ 134.579204][ T5025] ? __x64_sys_sendmsg+0x367/0x540 [ 134.584455][ T5025] ? do_syscall_64+0x3d/0xb0 [ 134.589195][ T5025] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 134.595414][ T5025] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 134.601337][ T5025] ? __nla_validate_parse+0x371e/0x4130 [ 134.607048][ T5025] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 134.613005][ T5025] __msan_warning+0x92/0x110 [ 134.617746][ T5025] strstr+0xb4/0x2e0 [ 134.621780][ T5025] ? strcmp+0x5f/0x120 [ 134.625995][ T5025] tipc_nl_node_reset_link_stats+0x41e/0xba0 [ 134.632205][ T5025] ? tipc_nl_node_get_link+0x9b0/0x9b0 [ 134.637820][ T5025] genl_rcv_msg+0x1447/0x14e0 [ 134.642660][ T5025] ? tipc_nl_node_get_link+0x9b0/0x9b0 [ 134.648322][ T5025] netlink_rcv_skb+0x3f1/0x750 [ 134.653329][ T5025] ? genl_bind+0x470/0x470 [ 134.657874][ T5025] ? genl_pernet_exit+0x60/0x60 [ 134.662851][ T5025] genl_rcv+0x3c/0x50 [ 134.667016][ T5025] netlink_unicast+0xf3b/0x1270 [ 134.672029][ T5025] netlink_sendmsg+0x127d/0x1430 [ 134.677162][ T5025] ? netlink_getsockopt+0x13b0/0x13b0 [ 134.682670][ T5025] ____sys_sendmsg+0xa8e/0xe70 [ 134.687609][ T5025] ___sys_sendmsg+0x2a1/0x3f0 [ 134.692437][ T5025] ? __stack_depot_save+0x21/0x4b0 [ 134.697692][ T5025] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 134.703637][ T5025] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 134.709557][ T5025] __x64_sys_sendmsg+0x367/0x540 [ 134.714662][ T5025] do_syscall_64+0x3d/0xb0 [ 134.719238][ T5025] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 134.725250][ T5025] RIP: 0033:0x7f4341a14759 [ 134.729822][ T5025] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 134.749539][ T5025] RSP: 002b:00007ffd519ceeb8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.758045][ T5025] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4341a14759 [ 134.766159][ T5025] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 134.774259][ T5025] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffd519cf058 [ 134.782365][ T5025] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f43419d7a60 [ 134.790469][ T5025] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000 [ 134.798602][ T5025] [ 134.801875][ T5025] Kernel Offset: disabled [ 134.806350][ T5025] Rebooting in 86400 seconds..