./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3948047758 <...> Warning: Permanently added '10.128.0.171' (ED25519) to the list of known hosts. execve("./syz-executor3948047758", ["./syz-executor3948047758"], 0x7ffe14491d70 /* 10 vars */) = 0 brk(NULL) = 0x555556f59000 brk(0x555556f59d00) = 0x555556f59d00 arch_prctl(ARCH_SET_FS, 0x555556f59380) = 0 set_tid_address(0x555556f59650) = 4998 set_robust_list(0x555556f59660, 24) = 0 rseq(0x555556f59ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3948047758", 4096) = 28 getrandom("\x73\xe6\x1c\x61\xf5\x6d\xd2\x31", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555556f59d00 brk(0x555556f7ad00) = 0x555556f7ad00 brk(0x555556f7b000) = 0x555556f7b000 mprotect(0x7f30f0893000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f59650) = 4999 ./strace-static-x86_64: Process 4999 attached [pid 4999] set_robust_list(0x555556f59660, 24) = 0 [pid 4999] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4999] setpgid(0, 0) = 0 [pid 4999] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4999] write(3, "1000", 4) = 4 [pid 4999] close(3) = 0 [pid 4999] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 4999] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4 [pid 4999] sendto(4, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0b\x00\x02\x00\x54\x49\x50\x43\x76\x32\x00\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 32 [pid 4999] recvfrom(4, [{nlmsg_len=548, nlmsg_type=nlctrl, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=4999}, "\x01\x02\x00\x00\x0b\x00\x02\x00\x54\x49\x50\x43\x76\x32\x00\x00\x06\x00\x01\x00\x31\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\xe4\x01\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x03\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 548 [pid 4999] recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=4999}, {error=0, msg={nlmsg_len=32, nlmsg_type=nlctrl, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 4999] close(4) = 0 [ 146.151470][ T4999] ===================================================== [ 146.158931][ T4999] BUG: KMSAN: uninit-value in strstr+0xb8/0x2f0 [ 146.165311][ T4999] strstr+0xb8/0x2f0 [ 146.170263][ T4999] tipc_nl_node_reset_link_stats+0x3ea/0xb50 [ 146.176651][ T4999] genl_rcv_msg+0x11ec/0x1290 [ 146.181499][ T4999] netlink_rcv_skb+0x371/0x650 [ 146.186551][ T4999] genl_rcv+0x40/0x60 [ 146.190682][ T4999] netlink_unicast+0xf47/0x1250 [ 146.195710][ T4999] netlink_sendmsg+0x1238/0x13d0 [ 146.200922][ T4999] ____sys_sendmsg+0x9c2/0xd60 [ 146.205920][ T4999] ___sys_sendmsg+0x28d/0x3c0 [ 146.210786][ T4999] __x64_sys_sendmsg+0x307/0x490 [ 146.215864][ T4999] do_syscall_64+0x41/0xc0 [ 146.220832][ T4999] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 146.226994][ T4999] [ 146.229397][ T4999] Uninit was created at: [ 146.233849][ T4999] slab_post_alloc_hook+0x12f/0xb70 [ 146.239354][ T4999] kmem_cache_alloc_node+0x577/0xa80 [ 146.244955][ T4999] kmalloc_reserve+0x13d/0x4a0 [ 146.249963][ T4999] __alloc_skb+0x318/0x740 [ 146.254550][ T4999] netlink_sendmsg+0xb34/0x13d0 [ 146.259772][ T4999] ____sys_sendmsg+0x9c2/0xd60 [ 146.264668][ T4999] ___sys_sendmsg+0x28d/0x3c0 [ 146.269527][ T4999] __x64_sys_sendmsg+0x307/0x490 [ 146.274597][ T4999] do_syscall_64+0x41/0xc0 [ 146.279224][ T4999] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 146.285324][ T4999] [ 146.287919][ T4999] CPU: 0 PID: 4999 Comm: syz-executor394 Not tainted 6.6.0-rc1-syzkaller-00125-ge42bebf6db29 #0 [ 146.298523][ T4999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 146.308802][ T4999] ===================================================== [ 146.315813][ T4999] Disabling lock debugging due to kernel taint [ 146.322217][ T4999] Kernel panic - not syncing: kmsan.panic set ... [ 146.328752][ T4999] CPU: 0 PID: 4999 Comm: syz-executor394 Tainted: G B 6.6.0-rc1-syzkaller-00125-ge42bebf6db29 #0 [ 146.340894][ T4999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 146.351069][ T4999] Call Trace: [ 146.354431][ T4999] [ 146.357439][ T4999] dump_stack_lvl+0x1bf/0x240 [ 146.362696][ T4999] dump_stack+0x1e/0x20 [ 146.367040][ T4999] panic+0x4d5/0xc70 [ 146.371108][ T4999] ? add_taint+0x108/0x1a0 [ 146.375696][ T4999] kmsan_report+0x2d0/0x2d0 [ 146.380394][ T4999] ? __msan_warning+0x96/0x110 [ 146.385310][ T4999] ? strstr+0xb8/0x2f0 [ 146.389582][ T4999] ? tipc_nl_node_reset_link_stats+0x3ea/0xb50 [ 146.395958][ T4999] ? genl_rcv_msg+0x11ec/0x1290 [ 146.400955][ T4999] ? netlink_rcv_skb+0x371/0x650 [ 146.406011][ T4999] ? genl_rcv+0x40/0x60 [ 146.410253][ T4999] ? netlink_unicast+0xf47/0x1250 [ 146.415413][ T4999] ? netlink_sendmsg+0x1238/0x13d0 [ 146.420830][ T4999] ? ____sys_sendmsg+0x9c2/0xd60 [ 146.425899][ T4999] ? ___sys_sendmsg+0x28d/0x3c0 [ 146.430857][ T4999] ? __x64_sys_sendmsg+0x307/0x490 [ 146.436141][ T4999] ? do_syscall_64+0x41/0xc0 [ 146.440986][ T4999] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 146.447199][ T4999] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 146.453206][ T4999] ? __nla_validate_parse+0x3894/0x4340 [ 146.459050][ T4999] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 146.465404][ T4999] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 146.471358][ T4999] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 146.477371][ T4999] __msan_warning+0x96/0x110 [ 146.482077][ T4999] strstr+0xb8/0x2f0 [ 146.486116][ T4999] ? strcmp+0x63/0x120 [ 146.490309][ T4999] tipc_nl_node_reset_link_stats+0x3ea/0xb50 [ 146.496465][ T4999] ? tipc_nl_node_get_link+0x980/0x980 [ 146.502113][ T4999] ? tipc_nl_node_get_link+0x980/0x980 [ 146.507788][ T4999] genl_rcv_msg+0x11ec/0x1290 [ 146.512558][ T4999] ? tipc_nl_node_get_link+0x980/0x980 [ 146.518195][ T4999] netlink_rcv_skb+0x371/0x650 [ 146.523193][ T4999] ? genl_bind+0x450/0x450 [ 146.527707][ T4999] ? genl_pernet_exit+0x60/0x60 [ 146.532650][ T4999] genl_rcv+0x40/0x60 [ 146.536724][ T4999] netlink_unicast+0xf47/0x1250 [ 146.541706][ T4999] netlink_sendmsg+0x1238/0x13d0 [ 146.546827][ T4999] ? netlink_getsockopt+0x980/0x980 [ 146.552221][ T4999] ____sys_sendmsg+0x9c2/0xd60 [ 146.557097][ T4999] ___sys_sendmsg+0x28d/0x3c0 [ 146.562086][ T4999] ? filter_irq_stacks+0x60/0x1a0 [ 146.567295][ T4999] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 146.573302][ T4999] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 146.579277][ T4999] __x64_sys_sendmsg+0x307/0x490 [ 146.584356][ T4999] do_syscall_64+0x41/0xc0 [ 146.588959][ T4999] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 146.595055][ T4999] RIP: 0033:0x7f30f0820899 [ 146.599559][ T4999] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 71 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 146.619414][ T4999] RSP: 002b:00007fffc0b25008 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 146.627923][ T4999] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f30f0820899 [ 146.635995][ T4999] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 146.644100][ T4999] RBP: 00007f30f08935f0 R08: 0000000000000000 R09: 0000000000000006 [ 146.652237][ T4999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.660305][ T4999] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 146.668496][ T4999] [ 146.671815][ T4999] Kernel Offset: disabled [ 146.676190][ T4999] Rebooting in 86400 seconds..