./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor119084479 <...> Warning: Permanently added '10.128.0.73' (ED25519) to the list of known hosts. execve("./syz-executor119084479", ["./syz-executor119084479"], 0x7ffcda5589f0 /* 10 vars */) = 0 brk(NULL) = 0x555556e38000 brk(0x555556e38d00) = 0x555556e38d00 arch_prctl(ARCH_SET_FS, 0x555556e38380) = 0 set_tid_address(0x555556e38650) = 4983 set_robust_list(0x555556e38660, 24) = 0 rseq(0x555556e38ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor119084479", 4096) = 27 getrandom("\x91\x2e\xe4\xcc\x6e\x84\xb6\xa0", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555556e38d00 brk(0x555556e59d00) = 0x555556e59d00 brk(0x555556e5a000) = 0x555556e5a000 mprotect(0x7fef1b843000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556e38650) = 4984 ./strace-static-x86_64: Process 4984 attached [pid 4984] set_robust_list(0x555556e38660, 24) = 0 [pid 4984] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4984] setpgid(0, 0) = 0 [pid 4984] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4984] write(3, "1000", 4) = 4 [pid 4984] close(3) = 0 [pid 4984] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 4984] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4 [pid 4984] sendto(4, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0b\x00\x02\x00\x54\x49\x50\x43\x76\x32\x00\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 32 [pid 4984] recvfrom(4, [{nlmsg_len=548, nlmsg_type=nlctrl, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=4984}, "\x01\x02\x00\x00\x0b\x00\x02\x00\x54\x49\x50\x43\x76\x32\x00\x00\x06\x00\x01\x00\x31\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\xe4\x01\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x03\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 548 [pid 4984] recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=4984}, {error=0, msg={nlmsg_len=32, nlmsg_type=nlctrl, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 4984] close(4) = 0 [ 156.277205][ T4984] netlink: 8 bytes leftover after parsing attributes in process `syz-executor119'. [ 156.287032][ T4984] ===================================================== [ 156.294374][ T4984] BUG: KMSAN: uninit-value in strscpy+0xc4/0x160 [ 156.300863][ T4984] strscpy+0xc4/0x160 [ 156.305131][ T4984] __tipc_nl_bearer_enable+0x634/0x2220 [ 156.310859][ T4984] tipc_nl_bearer_enable+0x3c/0x70 [ 156.316247][ T4984] genl_rcv_msg+0x1328/0x13c0 [ 156.321097][ T4984] netlink_rcv_skb+0x371/0x650 [ 156.326167][ T4984] genl_rcv+0x40/0x60 [ 156.330331][ T4984] netlink_unicast+0xf28/0x1230 [ 156.335453][ T4984] netlink_sendmsg+0x122f/0x13d0 [ 156.340556][ T4984] ____sys_sendmsg+0x9c2/0xd60 [ 156.345654][ T4984] ___sys_sendmsg+0x28d/0x3c0 [ 156.350515][ T4984] __x64_sys_sendmsg+0x307/0x490 [ 156.355801][ T4984] do_syscall_64+0x41/0xc0 [ 156.360378][ T4984] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 156.366503][ T4984] [ 156.368892][ T4984] Uninit was created at: [ 156.373432][ T4984] slab_post_alloc_hook+0x12f/0xb70 [ 156.378802][ T4984] kmem_cache_alloc_node+0x577/0xa80 [ 156.384364][ T4984] kmalloc_reserve+0x148/0x470 [ 156.389283][ T4984] __alloc_skb+0x318/0x740 [ 156.393976][ T4984] netlink_sendmsg+0xb34/0x13d0 [ 156.399023][ T4984] ____sys_sendmsg+0x9c2/0xd60 [ 156.404144][ T4984] ___sys_sendmsg+0x28d/0x3c0 [ 156.408986][ T4984] __x64_sys_sendmsg+0x307/0x490 [ 156.414208][ T4984] do_syscall_64+0x41/0xc0 [ 156.418805][ T4984] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 156.425152][ T4984] [ 156.427546][ T4984] CPU: 0 PID: 4984 Comm: syz-executor119 Not tainted 6.5.0-rc7-syzkaller #0 [ 156.436488][ T4984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 156.446734][ T4984] ===================================================== [ 156.453889][ T4984] Disabling lock debugging due to kernel taint [ 156.460125][ T4984] Kernel panic - not syncing: kmsan.panic set ... [ 156.466592][ T4984] CPU: 0 PID: 4984 Comm: syz-executor119 Tainted: G B 6.5.0-rc7-syzkaller #0 [ 156.476840][ T4984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 156.487034][ T4984] Call Trace: [ 156.490387][ T4984] [ 156.493381][ T4984] dump_stack_lvl+0x1bf/0x240 [ 156.498245][ T4984] dump_stack+0x1e/0x20 [ 156.502505][ T4984] panic+0x4d5/0xc70 [ 156.506498][ T4984] ? add_taint+0x108/0x1a0 [ 156.511009][ T4984] kmsan_report+0x2d0/0x2d0 [ 156.515705][ T4984] ? kmsan_internal_chain_origin+0xba/0xd0 [ 156.521720][ T4984] ? __msan_warning+0x96/0x110 [ 156.526654][ T4984] ? strscpy+0xc4/0x160 [ 156.530894][ T4984] ? __tipc_nl_bearer_enable+0x634/0x2220 [ 156.536756][ T4984] ? tipc_nl_bearer_enable+0x3c/0x70 [ 156.542156][ T4984] ? genl_rcv_msg+0x1328/0x13c0 [ 156.547183][ T4984] ? netlink_rcv_skb+0x371/0x650 [ 156.552249][ T4984] ? genl_rcv+0x40/0x60 [ 156.556561][ T4984] ? netlink_unicast+0xf28/0x1230 [ 156.561700][ T4984] ? netlink_sendmsg+0x122f/0x13d0 [ 156.566979][ T4984] ? ____sys_sendmsg+0x9c2/0xd60 [ 156.572042][ T4984] ? ___sys_sendmsg+0x28d/0x3c0 [ 156.577072][ T4984] ? __x64_sys_sendmsg+0x307/0x490 [ 156.582306][ T4984] ? do_syscall_64+0x41/0xc0 [ 156.587059][ T4984] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 156.593249][ T4984] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 156.599477][ T4984] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 156.605964][ T4984] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 156.611995][ T4984] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 156.618108][ T4984] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 156.624146][ T4984] __msan_warning+0x96/0x110 [ 156.628912][ T4984] strscpy+0xc4/0x160 [ 156.632998][ T4984] __tipc_nl_bearer_enable+0x634/0x2220 [ 156.638695][ T4984] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 156.644927][ T4984] tipc_nl_bearer_enable+0x3c/0x70 [ 156.650161][ T4984] ? __tipc_nl_bearer_enable+0x2220/0x2220 [ 156.656156][ T4984] genl_rcv_msg+0x1328/0x13c0 [ 156.661098][ T4984] ? filter_irq_stacks+0x164/0x1a0 [ 156.666415][ T4984] ? __tipc_nl_bearer_enable+0x2220/0x2220 [ 156.672434][ T4984] netlink_rcv_skb+0x371/0x650 [ 156.677377][ T4984] ? genl_bind+0x450/0x450 [ 156.681935][ T4984] ? genl_pernet_exit+0x60/0x60 [ 156.686967][ T4984] genl_rcv+0x40/0x60 [ 156.691051][ T4984] netlink_unicast+0xf28/0x1230 [ 156.696065][ T4984] netlink_sendmsg+0x122f/0x13d0 [ 156.701207][ T4984] ? netlink_getsockopt+0x990/0x990 [ 156.706540][ T4984] ____sys_sendmsg+0x9c2/0xd60 [ 156.711519][ T4984] ___sys_sendmsg+0x28d/0x3c0 [ 156.716362][ T4984] ? filter_irq_stacks+0x60/0x1a0 [ 156.721962][ T4984] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 156.727996][ T4984] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 156.734032][ T4984] __x64_sys_sendmsg+0x307/0x490 [ 156.739164][ T4984] do_syscall_64+0x41/0xc0 [ 156.743716][ T4984] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 156.749819][ T4984] RIP: 0033:0x7fef1b7d0899 [ 156.754358][ T4984] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 71 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 156.774337][ T4984] RSP: 002b:00007ffd63aa5998 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.782934][ T4984] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fef1b7d0899 [ 156.791004][ T4984] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000003 [ 156.799059][ T4984] RBP: 00007fef1b8435f0 R08: 0000000000000000 R09: 0000000000000006 [ 156.807122][ T4984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.815164][ T4984] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 156.823219][ T4984] [ 156.826535][ T4984] Kernel Offset: disabled [ 156.830922][ T4984] Rebooting in 86400 seconds..