./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3505337813 <...> Warning: Permanently added '10.128.1.91' (ED25519) to the list of known hosts. execve("./syz-executor3505337813", ["./syz-executor3505337813"], 0x7fff9d5aa4a0 /* 10 vars */) = 0 brk(NULL) = 0x555555dc7000 brk(0x555555dc7d00) = 0x555555dc7d00 arch_prctl(ARCH_SET_FS, 0x555555dc7380) = 0 set_tid_address(0x555555dc7650) = 5022 set_robust_list(0x555555dc7660, 24) = 0 rseq(0x555555dc7ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3505337813", 4096) = 28 getrandom("\x0f\xe1\x98\xd6\x2f\x3e\x2d\x16", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555555dc7d00 brk(0x555555de8d00) = 0x555555de8d00 brk(0x555555de9000) = 0x555555de9000 mprotect(0x7fab825f8000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555dc7650) = 5023 ./strace-static-x86_64: Process 5023 attached [pid 5023] set_robust_list(0x555555dc7660, 24) = 0 [pid 5023] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5023] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5023] setsid() = 1 [pid 5023] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5023] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5023] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5023] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5023] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5023] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5023] unshare(CLONE_NEWNS) = 0 [pid 5023] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5023] unshare(CLONE_NEWIPC) = 0 [pid 5023] unshare(CLONE_NEWCGROUP) = 0 [pid 5023] unshare(CLONE_NEWUTS) = 0 [pid 5023] unshare(CLONE_SYSVSEM) = 0 [pid 5023] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5023] write(3, "16777216", 8) = 8 [pid 5023] close(3) = 0 [pid 5023] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5023] write(3, "536870912", 9) = 9 [pid 5023] close(3) = 0 [pid 5023] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5023] write(3, "1024", 4) = 4 [pid 5023] close(3) = 0 [pid 5023] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5023] write(3, "8192", 4) = 4 [pid 5023] close(3) = 0 [pid 5023] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5023] write(3, "1024", 4) = 4 [pid 5023] close(3) = 0 [pid 5023] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5023] write(3, "1024", 4) = 4 [pid 5023] close(3) = 0 [pid 5023] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5023] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5023] close(3) = 0 [pid 5023] getpid() = 1 [pid 5023] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5049] set_robust_list(0x555555dc7660, 24) = 0 [pid 5049] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5023] <... clone resumed>, child_tidptr=0x555555dc7650) = 2 [pid 5049] <... prctl resumed>) = 0 [pid 5049] setpgid(0, 0) = 0 [pid 5049] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5049] write(3, "1000", 4) = 4 [pid 5049] close(3) = 0 [pid 5049] socket(AF_PACKET, SOCK_RAW, htons(ETH_P_ALL)) = 3 [pid 5049] ioctl(3, SIOCGIFINDEX, {ifr_name="geneve0", ifr_ifindex=61}) = 0 [ 156.824056][ C1] ===================================================== [ 156.831285][ C1] BUG: KMSAN: uninit-value in geneve_udp_encap_recv+0x36f9/0x3c10 [ 156.839410][ C1] geneve_udp_encap_recv+0x36f9/0x3c10 [ 156.845142][ C1] udp_queue_rcv_one_skb+0x1d39/0x1f20 [ 156.850835][ C1] udp_queue_rcv_skb+0x6ae/0x6e0 [ 156.856061][ C1] udp_unicast_rcv_skb+0x184/0x4b0 [ 156.861375][ C1] __udp4_lib_rcv+0x1c6b/0x3010 [ 156.866550][ C1] udp_rcv+0x7d/0xa0 [ 156.870632][ C1] ip_protocol_deliver_rcu+0x264/0x1300 [ 156.876463][ C1] ip_local_deliver_finish+0x2b8/0x440 [ 156.882390][ C1] ip_local_deliver+0x21f/0x490 [ 156.887554][ C1] ip_rcv+0x46f/0x760 [ 156.891733][ C1] __netif_receive_skb+0x1a6/0x5a0 [ 156.897229][ C1] process_backlog+0x480/0x8b0 [ 156.902247][ C1] __napi_poll+0xe3/0x980 [ 156.906800][ C1] net_rx_action+0x8b8/0x1870 [ 156.911676][ C1] __do_softirq+0x1b7/0x7c5 [ 156.916468][ C1] do_softirq+0x9a/0xf0 [ 156.920828][ C1] __local_bh_enable_ip+0x9b/0xa0 [ 156.926190][ C1] __dev_queue_xmit+0x2768/0x51c0 [ 156.931409][ C1] packet_xmit+0x9c/0x6b0 [ 156.935979][ C1] packet_sendmsg+0x8aef/0x9f10 [ 156.940997][ C1] __sys_sendto+0x735/0xa10 [ 156.945731][ C1] __x64_sys_sendto+0x125/0x1c0 [ 156.950771][ C1] do_syscall_64+0xcf/0x1e0 [ 156.955510][ C1] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 156.961619][ C1] [ 156.964128][ C1] Uninit was created at: [ 156.968623][ C1] kmem_cache_alloc_node+0x5cb/0xbc0 [ 156.974224][ C1] kmalloc_reserve+0x13d/0x4a0 [ 156.979222][ C1] __alloc_skb+0x352/0x790 [ 156.983904][ C1] alloc_skb_with_frags+0xc8/0xbd0 [ 156.989226][ C1] sock_alloc_send_pskb+0xa80/0xbf0 [ 156.994753][ C1] packet_sendmsg+0x70c2/0x9f10 [ 156.999777][ C1] __sys_sendto+0x735/0xa10 [ 157.004455][ C1] __x64_sys_sendto+0x125/0x1c0 [ 157.009457][ C1] do_syscall_64+0xcf/0x1e0 [ 157.014179][ C1] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 157.020293][ C1] [ 157.022676][ C1] CPU: 1 PID: 5049 Comm: syz-executor350 Not tainted 6.8.0-rc5-syzkaller-00297-gf2e367d6ad3b #0 [ 157.033299][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 157.043565][ C1] ===================================================== [ 157.050664][ C1] Disabling lock debugging due to kernel taint [ 157.056981][ C1] Kernel panic - not syncing: kmsan.panic set ... [ 157.063515][ C1] CPU: 1 PID: 5049 Comm: syz-executor350 Tainted: G B 6.8.0-rc5-syzkaller-00297-gf2e367d6ad3b #0 [ 157.075599][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 157.085846][ C1] Call Trace: [ 157.089216][ C1] [ 157.092170][ C1] dump_stack_lvl+0x1bf/0x240 [ 157.097042][ C1] dump_stack+0x1e/0x20 [ 157.101372][ C1] panic+0x4de/0xc90 [ 157.105494][ C1] kmsan_report+0x2d0/0x2d0 [ 157.110151][ C1] ? prep_new_page+0x30c/0x4e0 [ 157.115482][ C1] ? __msan_warning+0x96/0x120 [ 157.120419][ C1] ? geneve_udp_encap_recv+0x36f9/0x3c10 [ 157.126247][ C1] ? udp_queue_rcv_one_skb+0x1d39/0x1f20 [ 157.132185][ C1] ? udp_queue_rcv_skb+0x6ae/0x6e0 [ 157.137437][ C1] ? udp_unicast_rcv_skb+0x184/0x4b0 [ 157.142897][ C1] ? __udp4_lib_rcv+0x1c6b/0x3010 [ 157.148049][ C1] ? udp_rcv+0x7d/0xa0 [ 157.152282][ C1] ? ip_protocol_deliver_rcu+0x264/0x1300 [ 157.158165][ C1] ? ip_local_deliver_finish+0x2b8/0x440 [ 157.163977][ C1] ? ip_local_deliver+0x21f/0x490 [ 157.169224][ C1] ? ip_rcv+0x46f/0x760 [ 157.173578][ C1] ? __netif_receive_skb+0x1a6/0x5a0 [ 157.179023][ C1] ? process_backlog+0x480/0x8b0 [ 157.184085][ C1] ? __napi_poll+0xe3/0x980 [ 157.188740][ C1] ? net_rx_action+0x8b8/0x1870 [ 157.193689][ C1] ? __do_softirq+0x1b7/0x7c5 [ 157.198590][ C1] ? do_softirq+0x9a/0xf0 [ 157.203125][ C1] ? __local_bh_enable_ip+0x9b/0xa0 [ 157.208519][ C1] ? __dev_queue_xmit+0x2768/0x51c0 [ 157.213852][ C1] ? packet_xmit+0x9c/0x6b0 [ 157.218536][ C1] ? packet_sendmsg+0x8aef/0x9f10 [ 157.223751][ C1] ? __sys_sendto+0x735/0xa10 [ 157.228592][ C1] ? __x64_sys_sendto+0x125/0x1c0 [ 157.233769][ C1] ? do_syscall_64+0xcf/0x1e0 [ 157.238601][ C1] ? entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 157.244896][ C1] ? stack_depot_save_flags+0x2c/0x810 [ 157.250557][ C1] ? kmsan_get_metadata+0x146/0x1c0 [ 157.255878][ C1] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 157.262361][ C1] ? kmsan_get_metadata+0x146/0x1c0 [ 157.267743][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 157.273752][ C1] ? eth_type_trans+0x46a/0x800 [ 157.278825][ C1] ? kmsan_get_metadata+0x146/0x1c0 [ 157.284156][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 157.290090][ C1] __msan_warning+0x96/0x120 [ 157.294857][ C1] geneve_udp_encap_recv+0x36f9/0x3c10 [ 157.300523][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 157.306516][ C1] udp_queue_rcv_one_skb+0x1d39/0x1f20 [ 157.312129][ C1] ? geneve_gro_complete+0x320/0x320 [ 157.317796][ C1] udp_queue_rcv_skb+0x6ae/0x6e0 [ 157.322954][ C1] udp_unicast_rcv_skb+0x184/0x4b0 [ 157.328283][ C1] __udp4_lib_rcv+0x1c6b/0x3010 [ 157.333377][ C1] udp_rcv+0x7d/0xa0 [ 157.337459][ C1] ? udp_v4_early_demux+0x2790/0x2790 [ 157.343014][ C1] ip_protocol_deliver_rcu+0x264/0x1300 [ 157.348833][ C1] ip_local_deliver_finish+0x2b8/0x440 [ 157.354540][ C1] ip_local_deliver+0x21f/0x490 [ 157.359581][ C1] ? ip_local_deliver+0x490/0x490 [ 157.364759][ C1] ? ip_protocol_deliver_rcu+0x1300/0x1300 [ 157.370794][ C1] ip_rcv+0x46f/0x760 [ 157.374985][ C1] ? ip_rcv_core+0x15d0/0x15d0 [ 157.379972][ C1] __netif_receive_skb+0x1a6/0x5a0 [ 157.385262][ C1] ? ip_local_deliver_finish+0x440/0x440 [ 157.391051][ C1] process_backlog+0x480/0x8b0 [ 157.396086][ C1] ? trigger_rx_softirq+0x40/0x40 [ 157.401220][ C1] __napi_poll+0xe3/0x980 [ 157.405643][ C1] ? kmsan_get_metadata+0x146/0x1c0 [ 157.410977][ C1] net_rx_action+0x8b8/0x1870 [ 157.415851][ C1] ? kmsan_get_metadata+0x146/0x1c0 [ 157.421180][ C1] ? net_tx_action+0x950/0x950 [ 157.426053][ C1] __do_softirq+0x1b7/0x7c5 [ 157.430810][ C1] do_softirq+0x9a/0xf0 [ 157.435174][ C1] [ 157.438207][ C1] [ 157.441240][ C1] __local_bh_enable_ip+0x9b/0xa0 [ 157.446458][ C1] __dev_queue_xmit+0x2768/0x51c0 [ 157.451596][ C1] ? __dev_queue_xmit+0x352/0x51c0 [ 157.456869][ C1] ? filter_irq_stacks+0x164/0x1a0 [ 157.462173][ C1] packet_xmit+0x9c/0x6b0 [ 157.466606][ C1] ? kmsan_get_metadata+0x146/0x1c0 [ 157.471942][ C1] packet_sendmsg+0x8aef/0x9f10 [ 157.476995][ C1] ? kmsan_get_metadata+0x146/0x1c0 [ 157.482383][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 157.488364][ C1] ? aa_label_sk_perm+0x644/0x790 [ 157.493522][ C1] ? filter_irq_stacks+0x164/0x1a0 [ 157.498803][ C1] ? sbitmap_get+0x2b0/0x670 [ 157.503616][ C1] ? kmsan_get_metadata+0x146/0x1c0 [ 157.508947][ C1] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 157.515368][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 157.521373][ C1] ? aa_sk_perm+0x7d0/0xd80 [ 157.526104][ C1] ? packet_getsockopt+0xfb0/0xfb0 [ 157.531418][ C1] __sys_sendto+0x735/0xa10 [ 157.536045][ C1] ? kmsan_get_metadata+0x146/0x1c0 [ 157.541406][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 157.547370][ C1] __x64_sys_sendto+0x125/0x1c0 [ 157.552416][ C1] do_syscall_64+0xcf/0x1e0 [ 157.557107][ C1] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 157.563226][ C1] RIP: 0033:0x7fab8257faa9 [ 157.567759][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 d1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 157.587574][ C1] RSP: 002b:00007ffcd1932ed8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 157.596155][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fab8257faa9 [ 157.604234][ C1] RDX: 000000000000000e RSI: 0000000020000180 RDI: 0000000000000003 [ 157.612327][ C1] RBP: 00000000000f4240 R08: 00000000200001c0 R09: 0000000000000014 [ 157.620385][ C1] R10: 0000000024040025 R11: 0000000000000246 R12: 00007ffcd1932f40 [ 157.628507][ C1] R13: 0000000000000001 R14: 00007ffcd1932f40 R15: 0000000000000003 [ 157.636653][ C1] [ 157.639972][ C1] Kernel Offset: disabled [ 157.644348][ C1] Rebooting in 86400 seconds..