./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3862847591 <...> Warning: Permanently added '10.128.0.43' (ED25519) to the list of known hosts. execve("./syz-executor3862847591", ["./syz-executor3862847591"], 0x7ffc83ea6630 /* 10 vars */) = 0 brk(NULL) = 0x5555565c9000 brk(0x5555565c9d00) = 0x5555565c9d00 arch_prctl(ARCH_SET_FS, 0x5555565c9380) = 0 set_tid_address(0x5555565c9650) = 4992 set_robust_list(0x5555565c9660, 24) = 0 rseq(0x5555565c9ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3862847591", 4096) = 28 getrandom("\xe6\x06\xc5\xc6\xd2\x32\x6e\x6d", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555565c9d00 brk(0x5555565ead00) = 0x5555565ead00 brk(0x5555565eb000) = 0x5555565eb000 mprotect(0x7f1090209000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555565c9650) = 4993 ./strace-static-x86_64: Process 4993 attached [pid 4993] set_robust_list(0x5555565c9660, 24) = 0 [pid 4993] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4993] setpgid(0, 0) = 0 [pid 4993] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4993] write(3, "1000", 4) = 4 [pid 4993] close(3) = 0 [pid 4993] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 4993] sendto(3, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0b\x00\x02\x00\x54\x49\x50\x43\x76\x32\x00\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 32 [pid 4993] recvfrom(3, [{nlmsg_len=548, nlmsg_type=nlctrl, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=4993}, "\x01\x02\x00\x00\x0b\x00\x02\x00\x54\x49\x50\x43\x76\x32\x00\x00\x06\x00\x01\x00\x31\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\xe4\x01\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x03\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 548 [pid 4993] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=4993}, {error=0, msg={nlmsg_len=32, nlmsg_type=nlctrl, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 4993] close(3) = 0 [pid 4993] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [ 160.367046][ T4993] ===================================================== [ 160.374596][ T4993] BUG: KMSAN: uninit-value in strscpy+0xc4/0x160 [ 160.381119][ T4993] strscpy+0xc4/0x160 [ 160.385438][ T4993] __tipc_nl_bearer_enable+0x634/0x2220 [ 160.391249][ T4993] tipc_nl_bearer_enable+0x3c/0x70 [ 160.396714][ T4993] genl_rcv_msg+0x11ec/0x1290 [ 160.401859][ T4993] netlink_rcv_skb+0x371/0x650 [ 160.406980][ T4993] genl_rcv+0x40/0x60 [ 160.411193][ T4993] netlink_unicast+0xf47/0x1250 [ 160.416453][ T4993] netlink_sendmsg+0x1238/0x13d0 [ 160.421828][ T4993] ____sys_sendmsg+0x9c2/0xd60 [ 160.426985][ T4993] ___sys_sendmsg+0x28d/0x3c0 [ 160.431858][ T4993] __x64_sys_sendmsg+0x307/0x490 [ 160.437153][ T4993] do_syscall_64+0x41/0xc0 [ 160.441794][ T4993] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 160.448781][ T4993] [ 160.451203][ T4993] Uninit was created at: [ 160.455907][ T4993] slab_post_alloc_hook+0x12f/0xb70 [ 160.461313][ T4993] kmem_cache_alloc_node+0x577/0xa80 [ 160.466843][ T4993] kmalloc_reserve+0x148/0x470 [ 160.471841][ T4993] __alloc_skb+0x318/0x740 [ 160.476691][ T4993] netlink_sendmsg+0xb34/0x13d0 [ 160.481776][ T4993] ____sys_sendmsg+0x9c2/0xd60 [ 160.486853][ T4993] ___sys_sendmsg+0x28d/0x3c0 [ 160.491705][ T4993] __x64_sys_sendmsg+0x307/0x490 [ 160.496898][ T4993] do_syscall_64+0x41/0xc0 [ 160.501607][ T4993] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 160.508729][ T4993] [ 160.511171][ T4993] CPU: 1 PID: 4993 Comm: syz-executor386 Not tainted 6.5.0-syzkaller-12145-g4a0fc73da97e #0 [ 160.521578][ T4993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 160.531865][ T4993] ===================================================== [ 160.539074][ T4993] Disabling lock debugging due to kernel taint [ 160.545471][ T4993] Kernel panic - not syncing: kmsan.panic set ... [ 160.551994][ T4993] CPU: 1 PID: 4993 Comm: syz-executor386 Tainted: G B 6.5.0-syzkaller-12145-g4a0fc73da97e #0 [ 160.563662][ T4993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 160.573849][ T4993] Call Trace: [ 160.577400][ T4993] [ 160.580396][ T4993] dump_stack_lvl+0x1bf/0x240 [ 160.585283][ T4993] dump_stack+0x1e/0x20 [ 160.589626][ T4993] panic+0x4d5/0xc70 [ 160.593717][ T4993] ? add_taint+0x108/0x1a0 [ 160.598378][ T4993] kmsan_report+0x2d0/0x2d0 [ 160.603399][ T4993] ? kmsan_internal_chain_origin+0xba/0xd0 [ 160.609359][ T4993] ? __x64_sys_sendmsg+0x307/0x490 [ 160.614754][ T4993] ? __msan_warning+0x96/0x110 [ 160.619707][ T4993] ? strscpy+0xc4/0x160 [ 160.623998][ T4993] ? __tipc_nl_bearer_enable+0x634/0x2220 [ 160.630007][ T4993] ? tipc_nl_bearer_enable+0x3c/0x70 [ 160.635569][ T4993] ? genl_rcv_msg+0x11ec/0x1290 [ 160.640615][ T4993] ? netlink_rcv_skb+0x371/0x650 [ 160.645818][ T4993] ? genl_rcv+0x40/0x60 [ 160.650262][ T4993] ? netlink_unicast+0xf47/0x1250 [ 160.655554][ T4993] ? netlink_sendmsg+0x1238/0x13d0 [ 160.661002][ T4993] ? ____sys_sendmsg+0x9c2/0xd60 [ 160.666161][ T4993] ? ___sys_sendmsg+0x28d/0x3c0 [ 160.671128][ T4993] ? __x64_sys_sendmsg+0x307/0x490 [ 160.676391][ T4993] ? do_syscall_64+0x41/0xc0 [ 160.681197][ T4993] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 160.687681][ T4993] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 160.694365][ T4993] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 160.700516][ T4993] ? __nla_validate_parse+0x3894/0x4340 [ 160.706267][ T4993] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 160.712658][ T4993] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 160.718690][ T4993] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 160.724703][ T4993] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 160.730764][ T4993] __msan_warning+0x96/0x110 [ 160.735560][ T4993] strscpy+0xc4/0x160 [ 160.739738][ T4993] __tipc_nl_bearer_enable+0x634/0x2220 [ 160.745629][ T4993] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 160.751867][ T4993] tipc_nl_bearer_enable+0x3c/0x70 [ 160.757204][ T4993] ? __tipc_nl_bearer_enable+0x2220/0x2220 [ 160.763192][ T4993] genl_rcv_msg+0x11ec/0x1290 [ 160.768085][ T4993] ? __tipc_nl_bearer_enable+0x2220/0x2220 [ 160.774179][ T4993] netlink_rcv_skb+0x371/0x650 [ 160.779178][ T4993] ? genl_bind+0x450/0x450 [ 160.783811][ T4993] ? genl_pernet_exit+0x60/0x60 [ 160.788856][ T4993] genl_rcv+0x40/0x60 [ 160.793018][ T4993] netlink_unicast+0xf47/0x1250 [ 160.798140][ T4993] netlink_sendmsg+0x1238/0x13d0 [ 160.803357][ T4993] ? netlink_getsockopt+0x980/0x980 [ 160.808781][ T4993] ____sys_sendmsg+0x9c2/0xd60 [ 160.813675][ T4993] ___sys_sendmsg+0x28d/0x3c0 [ 160.818599][ T4993] ? filter_irq_stacks+0x60/0x1a0 [ 160.823783][ T4993] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 160.829804][ T4993] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 160.835775][ T4993] __x64_sys_sendmsg+0x307/0x490 [ 160.840941][ T4993] do_syscall_64+0x41/0xc0 [ 160.845568][ T4993] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 160.851695][ T4993] RIP: 0033:0x7f1090196899 [ 160.856257][ T4993] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 71 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 160.876122][ T4993] RSP: 002b:00007fff69cf8148 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.884748][ T4993] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1090196899 [ 160.892998][ T4993] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 160.901227][ T4993] RBP: 00007f10902095f0 R08: 0000000000000006 R09: 0000000000000006 [ 160.909443][ T4993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.917715][ T4993] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 160.925965][ T4993] [ 160.929223][ T4993] Kernel Offset: disabled [ 160.933623][ T4993] Rebooting in 86400 seconds..